Your message dated Tue, 05 Feb 2008 16:02:02 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#453032: fixed in mini-dinstall 0.6.23
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: mini-dinstall
Version: 0.6.22
Severity: minor
Tags: patch
Hi Christoph, Guido,
Since apt 0.7.7 in sid SHA256 hashes are used for signing repository release
files.
Now I am unsure if this is required or not, however support for SHA256 seems
like a
useful addition to mini-dinstall.
Included is a small patch that adds SHA256 hashes to the release file. The only
issue is that python 2.4 doesn't yet have python's hashlib, so I've used
python-crypt instead.
cheers,
Alex de Landgraaf
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.22.5-morphix (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages mini-dinstall depends on:
ii apt-utils 0.7.9 APT utility programs
ii python 2.4.4-6 An interactive high-level object-o
ii python-apt 0.7.3.1+b1 Python interface to libapt-pkg
ii python-support 0.7.4 automated rebuilding support for p
mini-dinstall recommends no packages.
-- no debconf information
diff -Naur mini-dinstall-0.6.22/debian/control mini-dinstall-0.6.22-new/debian/control
--- mini-dinstall-0.6.22/debian/control 2007-10-06 13:27:39.000000000 +0200
+++ mini-dinstall-0.6.22-new/debian/control 2007-11-26 21:44:35.000000000 +0100
@@ -10,7 +10,7 @@
Package: mini-dinstall
Architecture: all
-Depends: ${python:Depends}, python-apt, apt-utils
+Depends: ${python:Depends}, python-apt, apt-utils, python-crypto
Suggests: debian-keyring
Description: daemon for updating Debian packages in a repository
This program implements a miniature version of the "dinstall" program
diff -Naur mini-dinstall-0.6.22/mini-dinstall mini-dinstall-0.6.22-new/mini-dinstall
--- mini-dinstall-0.6.22/mini-dinstall 2007-10-06 13:27:39.000000000 +0200
+++ mini-dinstall-0.6.22-new/mini-dinstall 2007-11-26 21:41:30.000000000 +0100
@@ -1154,6 +1154,15 @@
shasum.update(buf)
buf = f.read(8192)
return shasum.hexdigest()
+ elif type == 'sha256':
+ import Crypto.Hash.SHA256
+ f = open(filename)
+ buf = f.read(8192)
+ shasum256 = SHA256.new(buf)
+ while buf != '':
+ shasum256.hash_update(buf)
+ buf = f.read(8192)
+ return shasum256.hash_digest()
else:
raise DinstallException('cannot compute hash of type %s; no builtin method or /usr/bin/%ssum', type, type)
@@ -1358,6 +1367,12 @@
shasum = self._get_file_sum('sha1', absfile)
size = os.stat(absfile)[stat.ST_SIZE]
f.write(' %s% 16d %s\n' % (shasum, size, os.path.basename(absfile)))
+ f.write('SHA256:\n')
+ for file in indexfiles:
+ absfile = self._abspath(file)
+ shasum256 = self._get_file_sum('sha256', absfile)
+ size = os.stat(absfile)[stat.ST_SIZE]
+ f.write(' %s% 16d %s\n' % (sha256sum, size, os.path.basename(absfile)))
f.close()
if self._sign_releasefile(os.path.basename(tmpname), self._abspath(arch)):
os.rename(tmpname, targetname)
@@ -1456,6 +1471,12 @@
shasum = self._get_file_sum('sha1', absfile)
size = os.stat(absfile)[stat.ST_SIZE]
f.write(' %s% 16d %s\n' % (shasum, size, file))
+ f.write('SHA256:\n')
+ for file in indexfiles:
+ absfile = self._abspath(file)
+ shasum256 = self._get_file_sum('sha256', absfile)
+ size = os.stat(absfile)[stat.ST_SIZE]
+ f.write(' %s% 16d %s\n' % (shasum256, size, file))
f.close()
if self._sign_releasefile(tmpname, self._abspath()):
os.rename(tmpname, targetname)
--- End Message ---
--- Begin Message ---
Source: mini-dinstall
Source-Version: 0.6.23
We believe that the bug you reported is fixed in the latest version of
mini-dinstall, which is due to be installed in the Debian FTP archive:
mini-dinstall_0.6.23.dsc
to pool/main/m/mini-dinstall/mini-dinstall_0.6.23.dsc
mini-dinstall_0.6.23.tar.gz
to pool/main/m/mini-dinstall/mini-dinstall_0.6.23.tar.gz
mini-dinstall_0.6.23_all.deb
to pool/main/m/mini-dinstall/mini-dinstall_0.6.23_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Christoph Goehre <[EMAIL PROTECTED]> (supplier of updated mini-dinstall package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 03 Feb 2008 10:53:25 +0100
Source: mini-dinstall
Binary: mini-dinstall
Architecture: source all
Version: 0.6.23
Distribution: unstable
Urgency: low
Maintainer: Christoph Goehre <[EMAIL PROTECTED]>
Changed-By: Christoph Goehre <[EMAIL PROTECTED]>
Description:
mini-dinstall - daemon for updating Debian packages in a repository
Closes: 451949 453032
Changes:
mini-dinstall (0.6.23) unstable; urgency=low
.
* use templates to generate success email (Closes: #451949)
* add SHA256 hashes in release files (Closes: #453032)
* don't fail on missing child processes in external hash generation
* merge identically hash generation for release file in mini-dinstall and
ChangeFile.py into misc.py
* change XS-Vcs tags to Vcs
* change Standard-Version to 3.7.3 and national encoding of copyright to
UTF-8
Files:
e1bf252f314088924e23b3fb56153436 743 devel optional mini-dinstall_0.6.23.dsc
f07e259f1fdecc252cff61ec269ec6a5 44287 devel optional
mini-dinstall_0.6.23.tar.gz
11a632a9c4b36021638a327f5585d490 42422 devel optional
mini-dinstall_0.6.23_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHqITln88szT8+ZCYRAp+0AJ0XSRZXMGo1VPimRuvluIO7JZc85wCfY0EA
h0uGpN4jvJKCfdoC16o1d+U=
=FM1r
-----END PGP SIGNATURE-----
--- End Message ---
