Your message dated Sat, 04 Feb 2017 12:48:35 +0000 with message-id <[email protected]> and subject line Bug#853732: fixed in gnutls28 3.5.8-3 has caused the Debian Bug report #853732, regarding gnutls28: build fails depending on timezone to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 853732: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853732 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: gnutls28 Version: 3.5.8-2 Severity: serious Tags: patch upstream Justification: fails to build from source (but built successfully in the past) The build fails in the pkcs7 testsuite because of a wrong date; the testsuite fudges to 2038-10-12 00:00:00 localtime: (pbuild22064)root@tglase:/tmp/buildd/gnutls28-3.5.8 # openssl x509 -noout -text -in doc/credentials/x509/ca.pem | fgrep Not Not Before: May 28 08:36:30 2011 GMT Not After : Oct 12 08:36:33 2038 GMT The fix is easy: --- /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7~ 2017-01-31 10:37:42.041736473 +0000 +++ /tmp/buildd/gnutls28-3.5.8/tests/cert-tests/pkcs7 2017-01-31 10:39:00.490675092 +0000 @@ -74,7 +74,7 @@ fi # check validation with date after intermediate cert issuance -datefudge -s "2038-10-12" \ +datefudge -s "2038-10-12 08:36:34 UTC" \ ${VALGRIND} "${CERTTOOL}" --inder --p7-verify --load-ca-certificate "${srcdir}/../../doc/credentials/x509/ca.pem" --infile "${srcdir}/data/${FILE}" >"${OUTFILE}" rc=$? This has been verified (including that "2038-10-12 08:36:32 UTC" toggles $?) on x32 after #853724 was resolved (issue with post-32bit timestamps), but is extremely likely to affect other architectures and thus is likely RC. (Also, why didn’t the reproducible builds efforts catch this? Probably because of the bug in datefudge…) (Also, why did upstream not catch this…) -- System Information: Debian Release: 9.0 APT prefers unreleased APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable') Architecture: x32 (x86_64) Foreign Architectures: i386, amd64 Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/lksh Init: sysvinit (via /sbin/init)
--- End Message ---
--- Begin Message ---Source: gnutls28 Source-Version: 3.5.8-3 We believe that the bug you reported is fixed in the latest version of gnutls28, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Metzler <[email protected]> (supplier of updated gnutls28 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 04 Feb 2017 12:58:45 +0100 Source: gnutls28 Binary: libgnutls28-dev libgnutls30 gnutls-bin gnutls-doc libgnutlsxx28 libgnutls-openssl27 libgnutls-dane0 Architecture: source Version: 3.5.8-3 Distribution: unstable Urgency: high Maintainer: Debian GnuTLS Maintainers <[email protected]> Changed-By: Andreas Metzler <[email protected]> Closes: 853732 Description: gnutls-bin - GNU TLS library - commandline utilities gnutls-doc - GNU TLS library - documentation and examples libgnutls28-dev - GNU TLS library - development files libgnutls30 - GNU TLS library - main runtime library libgnutls-dane0 - GNU TLS library - DANE security support libgnutls-openssl27 - GNU TLS library - OpenSSL wrapper libgnutlsxx28 - GNU TLS library - C++ runtime library Changes: gnutls28 (3.5.8-3) unstable; urgency=high . * Another two bugfixes from upstream. + 35_03_Address-test-suite-failure-due-to-timezone-differenc.patch Address test suite failure due to timezone differences. Closes: #853732 + 35_04_gnutls_pkcs11_obj_list_import_url4-always-return-an-.patch When returning success, but no elements gnutls_pkcs11_obj_list_import_url4 could have returned zero number of elements with a pointer that was uninitialized. Checksums-Sha1: ba332a55d643c0db674530fab2b4440d5f287c6b 3258 gnutls28_3.5.8-3.dsc eb8485baa14b34f7fc412a6f2f50f1a20012c851 101548 gnutls28_3.5.8-3.debian.tar.xz Checksums-Sha256: 1dcfcfebc6a833ac46e6bd5cde7dcf0873c14a4211228d5e96b36a65e0307e1e 3258 gnutls28_3.5.8-3.dsc 87f571ea1d89ecaa384510698e6b9d8fa4d71d08435101ae945fd7357cfa4ed2 101548 gnutls28_3.5.8-3.debian.tar.xz Files: 9c1181b7899a8948c25c11202ea225f8 3258 libs optional gnutls28_3.5.8-3.dsc 36560f5f3318e79c82f9c53a483dc334 101548 libs optional gnutls28_3.5.8-3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAliVxz0ACgkQpU8BhUOC FIR8/A//Y3eT5msuNCykGiROZ1w2XI9UHLn3yuxBtTRPBaMHaiuFN8gHD82qPQnL 35E+2SSJcXE5Qsfh5SZdw6cYXRK/TnaKVdAmAypJQgs/7HCgwiMdiILmMvGHYj0C Tz2xM3WuIo/8nSDrlqPACFScg5wjN6CiHrUXQEvITDv9lF+qoEiMaYjHRMvXpjp2 qLqt7s8n2g4Ck9Hy+NtZNiCI2v/b8s8zd50sEkq26AB25sRUuSoC78/QNtedhSY5 6PUu1mdEW6Xj8ZHIUMeFZG5WslHTM1VbuWMNMTSKcithn3sqIk7OxwGt73xvYexy chWiaIsNh6A+m7qsRVKAXmtq2y5bedGwfCiuE1TDIjyLuZTKndy9gXFBvR9QMDdN io/nF81z66sR+eqeDeK4vBHnYVdHtxbP4ktVEzxKQOQQFC73j/1MLib0cphBv53n haV6VGdrHj2Ce0O0ZOMwjaTB8O6xpa02jgCVtJOQ1Ziz2D9nxsZpO7iuZrl+cWkP PmBx4K9Tlb4VnsWz0uVPHkFz+f76F7Fw6YdUuTKkBCkVdUdp5o05Zjl9hJUnJhwz yKwkt/NqKNT2VAmJjwdXGhNDp391yYVxRoQVvmuurDj2gc1pmyXAKohEL/2Nv562 6qvcPLtVT1zXEz+9u9LkCF2XybEwmE63AhhEke4AtfDWQqkZ/+U= =7h7N -----END PGP SIGNATURE-----
--- End Message ---

