Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package yast2-ruby-bindings for 
openSUSE:Factory checked in at 2022-02-10 23:11:28
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/yast2-ruby-bindings (Old)
 and      /work/SRC/openSUSE:Factory/.yast2-ruby-bindings.new.1956 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "yast2-ruby-bindings"

Thu Feb 10 23:11:28 2022 rev:116 rq:952626 version:4.4.8

Changes:
--------
--- /work/SRC/openSUSE:Factory/yast2-ruby-bindings/yast2-ruby-bindings.changes  
2022-01-21 01:25:15.118656373 +0100
+++ 
/work/SRC/openSUSE:Factory/.yast2-ruby-bindings.new.1956/yast2-ruby-bindings.changes
        2022-02-10 23:11:29.836120352 +0100
@@ -1,0 +2,12 @@
+Mon Feb  7 13:25:10 UTC 2022 - Ladislav Slez??k <[email protected]>
+
+- Set "x509ignoreCN=0" GODEBUG environment variable option to
+  enable CN (Common Name) matching in SSL certificates in Go programs
+  (e.g. suseconnect-ng). Without it the CN would be ignored and
+  only the SAN (Subject Alternative Name) certificate fields would
+  be used. But the self-signed certificates usually only contain
+  the CN field without SAN so YaST could not connect to SMT/RMT
+  registration servers. (bsc#1195220)
+- 4.4.8
+
+-------------------------------------------------------------------

Old:
----
  yast2-ruby-bindings-4.4.7.tar.bz2

New:
----
  yast2-ruby-bindings-4.4.8.tar.bz2

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ yast2-ruby-bindings.spec ++++++
--- /var/tmp/diff_new_pack.nlTEw6/_old  2022-02-10 23:11:30.636122379 +0100
+++ /var/tmp/diff_new_pack.nlTEw6/_new  2022-02-10 23:11:30.644122399 +0100
@@ -17,7 +17,7 @@
 
 
 Name:           yast2-ruby-bindings
-Version:        4.4.7
+Version:        4.4.8
 Release:        0
 URL:            https://github.com/yast/yast-ruby-bindings
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build

++++++ yast2-ruby-bindings-4.4.7.tar.bz2 -> yast2-ruby-bindings-4.4.8.tar.bz2 
++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/yast2-ruby-bindings-4.4.7/package/yast2-ruby-bindings.changes 
new/yast2-ruby-bindings-4.4.8/package/yast2-ruby-bindings.changes
--- old/yast2-ruby-bindings-4.4.7/package/yast2-ruby-bindings.changes   
2022-01-19 08:37:19.000000000 +0100
+++ new/yast2-ruby-bindings-4.4.8/package/yast2-ruby-bindings.changes   
2022-02-08 09:22:25.000000000 +0100
@@ -1,4 +1,16 @@
 -------------------------------------------------------------------
+Mon Feb  7 13:25:10 UTC 2022 - Ladislav Slez??k <[email protected]>
+
+- Set "x509ignoreCN=0" GODEBUG environment variable option to
+  enable CN (Common Name) matching in SSL certificates in Go programs
+  (e.g. suseconnect-ng). Without it the CN would be ignored and
+  only the SAN (Subject Alternative Name) certificate fields would
+  be used. But the self-signed certificates usually only contain
+  the CN field without SAN so YaST could not connect to SMT/RMT
+  registration servers. (bsc#1195220)
+- 4.4.8
+
+-------------------------------------------------------------------
 Mon Jan 17 14:03:14 UTC 2022 - Ladislav Slez??k <[email protected]>
 
 - Added yast/rspec/helpers.rb (related to bsc#1194784)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/yast2-ruby-bindings-4.4.7/package/yast2-ruby-bindings.spec 
new/yast2-ruby-bindings-4.4.8/package/yast2-ruby-bindings.spec
--- old/yast2-ruby-bindings-4.4.7/package/yast2-ruby-bindings.spec      
2022-01-19 08:37:19.000000000 +0100
+++ new/yast2-ruby-bindings-4.4.8/package/yast2-ruby-bindings.spec      
2022-02-08 09:22:25.000000000 +0100
@@ -17,7 +17,7 @@
 
 
 Name:           yast2-ruby-bindings
-Version:        4.4.7
+Version:        4.4.8
 Release:        0
 URL:            https://github.com/yast/yast-ruby-bindings
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/yast2-ruby-bindings-4.4.7/src/ruby/yast/ops.rb 
new/yast2-ruby-bindings-4.4.8/src/ruby/yast/ops.rb
--- old/yast2-ruby-bindings-4.4.7/src/ruby/yast/ops.rb  2022-01-19 
08:37:19.000000000 +0100
+++ new/yast2-ruby-bindings-4.4.8/src/ruby/yast/ops.rb  2022-02-08 
09:22:25.000000000 +0100
@@ -9,6 +9,10 @@
   class YReference; end
   class Byteblock; end
 
+  # These emulate the YCP arithmetic and logic operators.
+  # In particular, `nil` as an argument mostly propagates to the results.
+  # You will probably want to check for `nil` beforehand
+  # and then use the normal Ruby operators.
   module Ops
     # map of YCPTypes to ruby types
     TYPES_MAP = {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/yast2-ruby-bindings-4.4.7/src/ruby/yast/y2start_helpers.rb 
new/yast2-ruby-bindings-4.4.8/src/ruby/yast/y2start_helpers.rb
--- old/yast2-ruby-bindings-4.4.7/src/ruby/yast/y2start_helpers.rb      
2022-01-19 08:37:19.000000000 +0100
+++ new/yast2-ruby-bindings-4.4.8/src/ruby/yast/y2start_helpers.rb      
2022-02-08 09:22:25.000000000 +0100
@@ -2,15 +2,31 @@
   module Y2StartHelpers
     # Configure global environment for YaST
     #
-    # Currently it only sets values for $PATH.
+    # Currently it only sets values for $PATH and $GODEBUG.
     #
     # By configuring $PATH, it ensures that correct external programs are 
executed when
     # relative paths are given, so possible CVEs are avoided when running YaST.
     #
+    # $GODEBUG is configured to enable CN (Common Name) matching in SSL 
certificates
+    # used by Go programs (suseconnect-ng used by registration).
+    # See https://bugzilla.suse.com/show_bug.cgi?id=1195220
+    #
     # Note that forked processes will inherit the environment configuration, 
for example
     # when executing commands via SCR or Cheetah.
     def self.config_env
       ENV["PATH"] = "/sbin:/usr/sbin:/usr/bin:/bin"
+
+      # Note: this setting was removed in go-1.17 (https://go.dev/doc/go1.17),
+      # SLE15 uses go-1.16
+      if ENV["GODEBUG"]
+        # check if already enabled
+        if !ENV["GODEBUG"].include?("x509ignoreCN=0")
+          # append to existing settings
+          ENV["GODEBUG"] = "#{ENV["GODEBUG"]},x509ignoreCN=0"
+        end
+      else
+        ENV["GODEBUG"] = "x509ignoreCN=0"
+      end
     end
 
     # Parses ARGV of y2start. it returns map with keys:

Reply via email to