Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package suseconnect-ng for openSUSE:Factory checked in at 2024-05-15 21:24:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/suseconnect-ng (Old) and /work/SRC/openSUSE:Factory/.suseconnect-ng.new.1880 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "suseconnect-ng" Wed May 15 21:24:19 2024 rev:24 rq:1174033 version:1.9.0 Changes: -------- --- /work/SRC/openSUSE:Factory/suseconnect-ng/suseconnect-ng.changes 2024-03-27 20:41:50.679520923 +0100 +++ /work/SRC/openSUSE:Factory/.suseconnect-ng.new.1880/suseconnect-ng.changes 2024-05-15 21:24:33.261156654 +0200 @@ -1,0 +2,7 @@ +Tue May 7 14:12:47 UTC 2024 - Thomas Schmidt <tschm...@suse.com> + +- Update to version 1.9.0 + * Fix certificate import for Yast when using a registration proxy with + self-signed SSL certificate (bsc#1223107) + +------------------------------------------------------------------- Old: ---- suseconnect-ng-1.8.0.tar.xz New: ---- suseconnect-ng-1.9.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ suseconnect-ng.spec ++++++ --- /var/tmp/diff_new_pack.Sh7zzt/_old 2024-05-15 21:24:34.221191402 +0200 +++ /var/tmp/diff_new_pack.Sh7zzt/_new 2024-05-15 21:24:34.225191547 +0200 @@ -19,7 +19,7 @@ %global project github.com/SUSE/connect-ng Name: suseconnect-ng -Version: 1.8.0 +Version: 1.9.0 Release: 0 URL: https://github.com/SUSE/connect-ng License: LGPL-2.1-or-later ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Sh7zzt/_old 2024-05-15 21:24:34.257192705 +0200 +++ /var/tmp/diff_new_pack.Sh7zzt/_new 2024-05-15 21:24:34.257192705 +0200 @@ -7,13 +7,13 @@ <service name="tar_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://github.com/SUSE/connect-ng.git</param> - <param name="revision">main</param> - <param name="version">_auto_</param> + <param name="revision">1.9_bugfix_release</param> + <param name="version">1.9.0</param> - <param name="match-tag">v*</param> + <!-- <param name="match-tag">v*</param> <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param> <param name="versionrewrite-replacement">\1</param> - <param name="versionformat">@PARENT_TAG@</param> + <param name="versionformat">@PARENT_TAG@</param> --> <param name="filename">suseconnect-ng</param> <param name="changesgenerate">enable</param> <param name="package-meta">no</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Sh7zzt/_old 2024-05-15 21:24:34.281193574 +0200 +++ /var/tmp/diff_new_pack.Sh7zzt/_new 2024-05-15 21:24:34.281193574 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/SUSE/connect-ng.git</param> - <param name="changesrevision">aa46faa190124664fa45c5c04667c8e1736b48b8</param></service></servicedata> + <param name="changesrevision">a3a3ab58d953b124c4ae6ad83b8c9b625fa2f587</param></service></servicedata> (No newline at EOF) ++++++ suseconnect-ng-1.8.0.tar.xz -> suseconnect-ng-1.9.0.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suseconnect-ng-1.8.0/go.mod new/suseconnect-ng-1.9.0/go.mod --- old/suseconnect-ng-1.8.0/go.mod 2024-03-19 16:13:16.000000000 +0100 +++ new/suseconnect-ng-1.9.0/go.mod 2024-05-07 16:53:45.000000000 +0200 @@ -1,3 +1,3 @@ module github.com/SUSE/connect-ng -go 1.16 +go 1.21 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suseconnect-ng-1.8.0/libsuseconnect/libsuseconnect.go new/suseconnect-ng-1.9.0/libsuseconnect/libsuseconnect.go --- old/suseconnect-ng-1.8.0/libsuseconnect/libsuseconnect.go 2024-03-19 16:13:16.000000000 +0100 +++ new/suseconnect-ng-1.9.0/libsuseconnect/libsuseconnect.go 2024-05-07 16:53:45.000000000 +0200 @@ -6,13 +6,15 @@ import "C" import ( + "crypto/tls" "crypto/x509" "encoding/json" "encoding/pem" "errors" "net" "net/url" - "strconv" + "slices" + "strconv" "unsafe" "github.com/SUSE/connect-ng/internal/connect" @@ -239,6 +241,15 @@ return string(pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: cert.Raw})) } +func certsToPEM(certs []*x509.Certificate) string { + slices.Reverse(certs) + var pemString string + for _, cert := range certs { + pemString += certToPEM(cert) + } + return pemString +} + func errorToJSON(err error) string { var s struct { ErrType string `json:"err_type"` @@ -276,6 +287,16 @@ // this could be: // 18 (X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT), // 19 (X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) or + // 20 (X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) + s.Code = 19 // this seems to best match original behavior + } else if ce, ok := ierr.(*tls.CertificateVerificationError); ok { + // starting with go1.20, we receive this error (https://go.dev/doc/go1.20#crypto/tls) + s.ErrType = "SSLError" + s.Message = ierr.Error() + s.Data = certsToPEM(ce.UnverifiedCertificates) + // this could be: + // 18 (X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT), + // 19 (X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) or // 20 (X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) s.Code = 19 // this seems to best match original behavior } else if ce, ok := ierr.(x509.HostnameError); ok { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suseconnect-ng-1.8.0/suseconnect-ng.changes new/suseconnect-ng-1.9.0/suseconnect-ng.changes --- old/suseconnect-ng-1.8.0/suseconnect-ng.changes 2024-03-19 16:13:16.000000000 +0100 +++ new/suseconnect-ng-1.9.0/suseconnect-ng.changes 2024-05-07 16:53:45.000000000 +0200 @@ -1,4 +1,11 @@ ------------------------------------------------------------------- +Tue May 7 14:12:47 UTC 2024 - Thomas Schmidt <tschm...@suse.com> + +- Update to version 1.9.0 + * Fix certificate import for Yast when using a registration proxy with + self-signed SSL certificate (bsc#1223107) + +------------------------------------------------------------------- Wed Mar 13 12:37:29 UTC 2024 - José Gómez <1josegom...@gmail.com> - Update to version 1.8.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suseconnect-ng-1.8.0/suseconnect-ng.spec new/suseconnect-ng-1.9.0/suseconnect-ng.spec --- old/suseconnect-ng-1.8.0/suseconnect-ng.spec 2024-03-19 16:13:16.000000000 +0100 +++ new/suseconnect-ng-1.9.0/suseconnect-ng.spec 2024-05-07 16:53:45.000000000 +0200 @@ -18,7 +18,7 @@ %global project github.com/SUSE/connect-ng Name: suseconnect-ng -Version: 1.8.0 +Version: 1.9.0 Release: 0 URL: https://github.com/SUSE/connect-ng License: LGPL-2.1-or-later
