After updated package:

kirkland@x230:~⟫ sudo pollinate -r
[sudo] password for kirkland: 
Oct 15 09:40:38 x230 pollinate[7392]: system was previously seeded at 
[2014-10-15 09:36:58.285035647 +0200]
Oct 15 09:40:38 x230 pollinate[7402]: client sent challenge to 
[https://entropy.ubuntu.com/]
Oct 15 09:40:39 x230 pollinate[7426]: client verified challenge/response with 
[https://entropy.ubuntu.com/]
Oct 15 09:40:39 x230 pollinate[7436]: client hashed response from 
[https://entropy.ubuntu.com/]
Oct 15 09:40:39 x230 pollinate[7438]: client successfully seeded [/dev/urandom]


** Description changed:

  Pollinate ships entropy.ubuntu.com's public certificate for tighter
  security.
  
  This certificate has been updated and pollinate needs to be updated.
+ 
+ [Impact]
+ Any new 14.04 (Trusty) cloud instance with a down-level version of pollinate 
will fail to seed their PRNG from entropy.ubuntu.com.
+ 
+ [Test Case]
+ Run:
+  $ sudo pollinate -r
+ to reseed your PRNG.  If you have the old version of pollinate, you'll get 
certificate errors (See Comment #1), and it will exit non-zero.  If you have 
the new version (already uploaded to ppa:pollinate/ppa, utopic, 
trusty-proposed), it will work again and exit zero (see Comment #2).
+ 
+ [Regression Potential]
+ Negligible.  A single file is updated with a new public SSL certificate for 
https://entropy.ubuntu.com, in /etc/pollinate/entropy.ubuntu.com.pem

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to pollinate in Ubuntu.
https://bugs.launchpad.net/bugs/1381359

Title:
  [SRU] ship new public cert

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pollinate/+bug/1381359/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to