Your message dated Thu, 06 Oct 2016 12:48:51 +0000
with message-id <[email protected]>
and subject line Bug#831569: fixed in libwebsockets 2.0.3-1
has caused the Debian Bug report #831569,
regarding libwebsockets: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
831569: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831569
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libwebsockets
Version: 1.7.3-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: randomness
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the "reproducible builds" effort [0], we noticed
that libwebsockets could not be built reproducibly.
Patch attached. Whilst it uses a deterministic key (!!), this is
a) a test server and b) key was not being varied for each installation
prior to this patch, so it is "no worse".
[0] https://wiki.debian.org/ReproducibleBuilds
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/keys/libwebsockets-test-server.key.pem 1970-01-01
02:00:00.000000000 +0200
--- b/debian/keys/libwebsockets-test-server.key.pem 2016-07-17
13:53:45.083618700 +0200
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAM8ZUC3tOkX70b0x
+I9wneuXYkaCuwnH4RJ7INmYKzHAJG1Efu54w774mSi1dcoyBDY9z9fjHPLFIweV8
+UOqeWpTdyYjN30lnEyZAan1Or7LQsJyiMUpJ8GlGTOi9ZMEPNO8KF780RhWoa/h8
+8+GCboTAcNOf47HK42y7kREYiFOlAgMBAAECgYAHqCDtwcKQydGkVAfGYPNLQimI
+Lk3kFtC6qh5QwX9zePK4mhq+q4KBnjrJ2JWemjrdHeVvMDaPO2hnyqPXOMmSfFml
+O1P1psR5NW5wSBcYE11Meg6gEarkPu3jiRvCxkeQIRn0L1MxNerSzOkNwEqCQ1vH
+kOZlrSdv59BbM47lYQJBAPhJ5QfcECG4axwqs/jBbBibit4BooEGInH03MYCaaUr
+XDf2uSQqYRMdOHBcfCTjPrAugI/U1cmXYJAXJYDbLXkCQQDVh+zIhzAbm5rtWKVA
+cXsuRQ2btbeaHVEYyykgjtWPnVcpY/ppWJx7hj+aE+RuUMnUCB3z2i7HmRAofYLK
+6IiNAkEAkjXpslwr/797C8Y13zn/7unBuAScboBvTk4UqGIJVmOXVblrw1lVew0N
+DFXaIVrUsqlfudNq5eDH03Jd+miXeQJAAx1kethd/0kZzXSJlJMTNO2U8TyJXRoo
+YLA1/V+YBexJpTTsJjVAsxyWOO0pW+KZzxn/Ndts60R0U+Lg0Yzq0QJBAL9v/cqP
+sBXBbTDp4ZxTCfWh4uOQNn748FK6mBfclBk3+IOwx7/1anmv3+O3bTinV2KuyW8F
+IYYyvBhRllIRUD4=
+-----END PRIVATE KEY-----
--- a/debian/keys/libwebsockets-test-server.pem 1970-01-01 02:00:00.000000000
+0200
--- b/debian/keys/libwebsockets-test-server.pem 2016-07-17 13:53:51.091669875
+0200
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----
+MIIC3DCCAkWgAwIBAgIJAPTZ5EUcA04BMA0GCSqGSIb3DQEBCwUAMIGGMQswCQYD
+VQQGEwJHQjEQMA4GA1UECAwHRXJld2hvbjETMBEGA1UEBwwKQWxsIGFyb3VuZDEb
+MBkGA1UECgwSbGlid2Vic29ja2V0cy10ZXN0MRIwEAYDVQQDDAlsb2NhbGhvc3Qx
+HzAdBgkqhkiG9w0BCQEWEG5vbmVAaW52YWxpZC5vcmcwHhcNMTYwNzE3MTEyMzAy
+WhcNNDMxMjAzMTEyMzAyWjCBhjELMAkGA1UEBhMCR0IxEDAOBgNVBAgMB0VyZXdo
+b24xEzARBgNVBAcMCkFsbCBhcm91bmQxGzAZBgNVBAoMEmxpYndlYnNvY2tldHMt
+dGVzdDESMBAGA1UEAwwJbG9jYWxob3N0MR8wHQYJKoZIhvcNAQkBFhBub25lQGlu
+dmFsaWQub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPGVAt7TpF+9G9
+MSPcJ3rl2JGgrsJx+ESeyDZmCsxwCRtRH7ueMO++JkotXXKMgQ2Pc/X4xzyxSMHl
+fFDqnlqU3cmIzd9JZxMmQGp9Tq+y0LCcojFKSfBpRkzovWTBDzTvChe/NEYVqGv4
+fPPhgm6EwHDTn+OxyuNsu5ERGIhTpQIDAQABo1AwTjAdBgNVHQ4EFgQUfBTyeWQo
+M3FwTh5Z2uGrpkLNBdIwHwYDVR0jBBgwFoAUfBTyeWQoM3FwTh5Z2uGrpkLNBdIw
+DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQAw4SDtCjUwBQEaRWJebmbv
+BFRyAj3TJXJHy58K6rR3ejKnTkhfoUO3pcls+kbANbUuaD+hQs8KGA2sb8yG6aYI
+QVkZKTwK+lqQ5I0PRwXsnz7qmGySjgQPfDZTSB0VPjXA0QAjibObi+QKKXl6J4ed
+432JtwMXX/wQ+iJtjUAEOg==
+-----END CERTIFICATE-----
--- a/debian/libwebsockets-test-server-common.install 2016-07-17
13:22:43.963341073 +0200
--- b/debian/libwebsockets-test-server-common.install 2016-07-17
13:57:15.969410550 +0200
@@ -1 +1,2 @@
usr/share/libwebsockets-test-server/*
+debian/keys/* usr/share/libwebsockets-test-server
--- End Message ---
--- Begin Message ---
Source: libwebsockets
Source-Version: 2.0.3-1
We believe that the bug you reported is fixed in the latest version of
libwebsockets, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Pentchev <[email protected]> (supplier of updated libwebsockets package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 02 Oct 2016 02:27:22 +0300
Source: libwebsockets
Binary: libwebsockets8 libwebsockets-dev libwebsockets-test-server
libwebsockets-test-server-common
Architecture: source
Version: 2.0.3-1
Distribution: experimental
Urgency: medium
Maintainer: Peter Pentchev <[email protected]>
Changed-By: Peter Pentchev <[email protected]>
Description:
libwebsockets-dev - lightweight C websockets library - development files
libwebsockets-test-server - lightweight C websockets library - test servers
libwebsockets-test-server-common - lightweight C websockets library - test
servers data
libwebsockets8 - lightweight C websockets library
Closes: 828416 831569
Changes:
libwebsockets (2.0.3-1) experimental; urgency=medium
.
* Add the typos patch to correct some typographical errors.
* Fix the upstream Git URLs in the watch file and the upstream
metadata file to reflect another URL change on libwebsockets.org.
* Use the HTTPS scheme for the copyright format specification URL.
* Use a pregenerated test server SSL key to make the build reproducible.
Closes: #831569; thanks, Chris Lamb!
* Fix the build with OpenSSL 1.1. Closes: #828416; thanks, Kurt Roeckx!
* New upstream release:
- add the new lws_snprintf function to the symbols file
- add the soname-8 patch to avoid a SONAME bump merely for
an added function
* Point the Vcs-* URLs to the debian-v2.0-stable branch.
* Bump the debhelper compatibility level to 10:
- drop --parallel from the dh invocation, it is the default now
Checksums-Sha1:
03d21f7d6e66a6fbfd85981b654c0dc71d8d685d 2300 libwebsockets_2.0.3-1.dsc
6d99f22f9431333e0eb8bfab7e07d8b0f30780cf 3000164
libwebsockets_2.0.3.orig.tar.gz
1678f65f2c177550de815aa25f3ffe005017f6bb 12576
libwebsockets_2.0.3-1.debian.tar.xz
Checksums-Sha256:
232d7eb297d2111fa949ad9f0fedebd5e3a90e01c989807c2119bfc071960196 2300
libwebsockets_2.0.3-1.dsc
cf0e91b564c879ab98844385c98e7c9e298cbb969dbc251a3f18a47feb94342c 3000164
libwebsockets_2.0.3.orig.tar.gz
c9155719dd09dda48066e4a04c8be72bcb4bb3cab5703d4a6a3a5e588d8bf2d0 12576
libwebsockets_2.0.3-1.debian.tar.xz
Files:
0a083dbe1535f2e213fd9b6e5c7d86a5 2300 libs optional libwebsockets_2.0.3-1.dsc
a025156d606d90579e65d53ccd062a94 3000164 libs optional
libwebsockets_2.0.3.orig.tar.gz
6c3857de26852e801fbe0b6eea5d31d5 12576 libs optional
libwebsockets_2.0.3-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=LBhI
-----END PGP SIGNATURE-----
--- End Message ---
