Package: release.debian.org Severity: normal User: [email protected] Usertags: unblock
Please unblock package dns-root-data Dear release team, the 2017041101 update of dns-root-data package contains: - fixes to parse_root_data.sh script to unfail the non-dash shells - closes RC bug #862252 (use printf instead of echo command) - update root.hints to 2017041101 version (no other change then version though) - update root.key and d/rules to strip any timestamp, so the build is more or less reproducible (the get_orig_source still depends on upstream data at the time of the build, but it should be more reliable) - little fixes to parse_root_data.sh script, as suggested by shellcheck: + use read -r instead of read on xml2 output data + use [:upper:]/[:lower:] instead of [A-Z]/[a-z] as tr argument + use [ a ] || [ b ] syntax instead of [ a -o b ] unblock dns-root-data/2017041101 -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.4.0-67-generic (SMP w/24 CPU cores) Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 3.0 (native) Source: dns-root-data Binary: dns-root-data Architecture: all Version: 2017041101 Maintainer: Debian DNS Maintainers <[email protected]> Uploaders: Ondřej Surý <[email protected]>, Robert Edmonds <[email protected]> Homepage: https://data.iana.org/root-anchors/ Standards-Version: 3.9.6 Vcs-Browser: http://git.debian.org/?p=pkg-dns/dns-root-data.git;a=summary Vcs-Git: git://git.debian.org/pkg-dns/dns-root-data.git Build-Depends: debhelper (>= 8.0.0), unbound-anchor, openssl, ldnsutils, xml2 Package-List: dns-root-data deb misc optional arch=all Checksums-Sha1: 36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz Checksums-Sha256: c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz Files: 4982844cb0e3b0223fdc93bf9671adc3 14316 dns-root-data_2017041101.tar.xz -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAlksENtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8 uwf1vA/9HNXfzN7Z8tUuDm40HsXrCR6vK1KfGpcsoYkqZtyqEnkCSwCjzBCpuXzd IO9bVVzQaUkzvxVK8Gq0hJaKri7BUKmgRTg9v8MmcIoqmmyi3TIxU5NFUbTgFwaj qy47bq/gNVJUrYGQJssSE70fHv1iCwWT3Y3xHNdNJfkjiOqIgqgJwB7RzXcPZjgF ZqzUWelV6vDUE1OsOCo2a8hLRGZa11qK/mbZ8eBhYOwVzf6S/z/tZ7L2y2oUEC3J u2et1PweqCmQPNC2Xs9KRya9XdFBuMRt4x3EPHygG0u8sziioVaHeNgfNP66gU2g FlADNfrgS7KLTwXlfHkJ1JLW5/9Zbce3HFdfNGBwESxWSPLJRhCVcycN3N/71T/h aycV57+hG+rHGOsCdNa9c79KrriikrokBilA31NDmOH77wk6g88EhYtvG7TRbd3S sCAYPdk06aIAz2V8nMOXATag5iLRrtdlcJaqvmpfB2NyrXWXOlgb0mTc912ACY6B seDPD3OAmVG5ubOUkBSMyQj7tabjOKkHu+ioYOs3AEYVyIlFxfvle4GwPb6XLaze gaf5ECU4UdZb/7ARKcX3PEL/UQXxIH3F7CExliqQZ/kqqXD0nWcS16I/BuW+YkwP 86k6ofr1/oxiHbdkFEQvSAocbv2GN74jO2R1Q6p7ptv7K4Ey8Og= =pbH7 -----END PGP SIGNATURE-----
diff -Nru dns-root-data-2017020200/debian/changelog dns-root-data-2017041101/debian/changelog --- dns-root-data-2017020200/debian/changelog 2017-03-22 09:06:08.000000000 +0100 +++ dns-root-data-2017041101/debian/changelog 2017-05-29 14:05:37.000000000 +0200 @@ -1,3 +1,12 @@ +dns-root-data (2017041101) unstable; urgency=medium + + * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252) + * Update to 2017041101 version of root zone + * Remove timestamps from root.key to make the build reproducible + * Shell syntax cleanup + + -- Ondřej Surý <[email protected]> Mon, 29 May 2017 14:05:37 +0200 + dns-root-data (2017020200) unstable; urgency=medium * Update to 2016102001 version of the root.zone diff -Nru dns-root-data-2017020200/debian/rules dns-root-data-2017041101/debian/rules --- dns-root-data-2017020200/debian/rules 2017-03-22 09:06:08.000000000 +0100 +++ dns-root-data-2017041101/debian/rules 2017-05-29 14:05:37.000000000 +0200 @@ -32,6 +32,6 @@ /usr/sbin/unbound-anchor \ -a $(CURDIR)/root-auto.key \ -c $(CURDIR)/icannbundle.pem || echo "Check the root-auto.key" - < root-auto.key grep -Ev "^($$|;)" > root.key + < root-auto.key grep -Ev "^($$|;)" | sed -e 's/ ;;count=.*//' > root.key rm root-auto.key wget -O $(CURDIR)/root.hints "http://www.internic.net/domain/named.root"; diff -Nru dns-root-data-2017020200/parse-root-anchors.sh dns-root-data-2017041101/parse-root-anchors.sh --- dns-root-data-2017020200/parse-root-anchors.sh 2017-03-22 09:06:08.000000000 +0100 +++ dns-root-data-2017041101/parse-root-anchors.sh 2017-05-29 14:05:37.000000000 +0200 @@ -5,19 +5,19 @@ TTL=172800 export IFS="=" -xml2 | while read KEY VAL; do +xml2 | while read -r KEY VAL; do case "$KEY" in "/TrustAnchor/Zone") ZONE="$VAL";; "/TrustAnchor/KeyDigest/KeyTag") KTAG="$VAL";; "/TrustAnchor/KeyDigest/Algorithm") ALGO="$VAL";; "/TrustAnchor/KeyDigest/DigestType") DTYPE="$VAL";; "/TrustAnchor/KeyDigest/Digest") - DIGEST="$(echo "$VAL" | tr "[A-Z]" "[a-z]")" - if [ -z "$ZONE" -o -z "$KTAG" -o -z "$ALGO" -o -z "$DTYPE" ]; then + DIGEST="$(echo "$VAL" | tr "[:upper:]" "[:lower:]")" + if [ -z "$ZONE" ] || [ -z "$KTAG" ] || [ -z "$ALGO" ] || [ -z "$DTYPE" ]; then echo "Missing some KeyDigest parameter" exit 1 fi - echo "$ZONE\t$TTL\tIN\tDS\t$KTAG $ALGO $DTYPE $DIGEST" + printf "%s\t%s\tIN\tDS\t%s %s %s %s\n" "$ZONE" "$TTL" "$KTAG" "$ALGO" "$DTYPE" "$DIGEST" unset KTAG ALGO DTYPE DIGEST ;; esac diff -Nru dns-root-data-2017020200/root.hints dns-root-data-2017041101/root.hints --- dns-root-data-2017020200/root.hints 2017-03-22 09:06:08.000000000 +0100 +++ dns-root-data-2017041101/root.hints 2017-05-29 14:05:37.000000000 +0200 @@ -9,8 +9,8 @@ ; on server FTP.INTERNIC.NET ; -OR- RS.INTERNIC.NET ; -; last update: October 20, 2016 -; related version of root zone: 2016102001 +; last update: April 11, 2017 +; related version of root zone: 2017041101 ; ; formerly NS.INTERNIC.NET ; diff -Nru dns-root-data-2017020200/root.key dns-root-data-2017041101/root.key --- dns-root-data-2017020200/root.key 2017-03-22 09:06:08.000000000 +0100 +++ dns-root-data-2017041101/root.key 2017-05-29 14:05:37.000000000 +0200 @@ -1,2 +1,2 @@ -. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1490169621 ;;Wed Mar 22 09:00:21 2017 +. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] . 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=0 [ START ]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 29 May 2017 14:05:37 +0200 Source: dns-root-data Binary: dns-root-data Architecture: source Version: 2017041101 Distribution: unstable Urgency: medium Maintainer: Debian DNS Maintainers <[email protected]> Changed-By: Ondřej Surý <[email protected]> Description: dns-root-data - DNS root data including root zone and DNSSEC key Closes: 862252 Changes: dns-root-data (2017041101) unstable; urgency=medium . * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252) * Update to 2017041101 version of root zone * Remove timestamps from root.key to make the build reproducible * Shell syntax cleanup Checksums-Sha1: 22e3448e5f2705b2eb8bce574c64c7690f08b543 1905 dns-root-data_2017041101.dsc 36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz 4f7dec4a2cd50068b672cfa00397693dbf45aa85 5946 dns-root-data_2017041101_amd64.buildinfo Checksums-Sha256: 1f3c5b391d93da9789e2914671bbc75bfb6853a198ffca45b9d5292a308ab748 1905 dns-root-data_2017041101.dsc c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz ce30c74920a986730e746d0e7213afa7b3f5609e86b0adf343b22effd17560fb 5946 dns-root-data_2017041101_amd64.buildinfo Files: cec66a2e89c12b0f03cca9bdfab5f4e1 1905 misc optional dns-root-data_2017041101.dsc 4982844cb0e3b0223fdc93bf9671adc3 14316 misc optional dns-root-data_2017041101.tar.xz 08531207764c72a7912f969b68174ebd 5946 misc optional dns-root-data_2017041101_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAlksENtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8 uwfgeBAAif/tg873Kwltb3T/N72QfY+0bQoOaq2yPFXPg+8OxW59W0ghXpgsjDLy bmixSBFALbpcFASEXVKE481zsqiGzvClWwyntLGIqbYeFtbJ7d0/WsRoX/W2HstF nY5of4vwx6wQRxbRKcEhE7vwC5ePOI8IEMskjYpph3FXJdntEaZ48zARnsInUr2K nhPxWlqOd0yzWGHk9YhUtfssh7sTjiPlRJkTtsyYzltgiisZiYY0Ykcl0/q72Ppx Emqxv3xirikjbSBujSEoZcrxtQIyYygngUT8Sm5NFxO+rXFvYMGlkF9z75lWpPLh 4JUM+8AdVkJxQ52POYm2W7WS+HX2jfo674r0Ab5CWXwUIGgMmEw4czuVNlu+kf57 LrXYE4LzmgnDbdLtF+DAWs0jUunpKIOp5GoQC61p2Zu1pQ3X+k6Yfid+tGpIb3tP UUk5eUy3k18sJV5HqSSyew23Hv4XSDRuuwNgezpo296hARXfwIfon/vmkYuXNaDq jkuI+eoKB32tu+xm/qvHmkNRhBTx/yndwu1sjsFBrubE2G9fnsvN4fy+AgpiWAUp 1kiiaBGCo7NUHMP22V/EEBUilUQ2BlRHxI1EMzR1G6Dvo/+cDHpD75VEpdKMLII3 AiRM0eVOYFe9yq2cfA8GhosVZsm1iPuXwi9tnDgdtzd1E9qMqQM= =RivQ -----END PGP SIGNATURE-----
