Package: release.debian.org Severity: normal Tags: stretch User: release.debian....@packages.debian.org Usertags: pu
Hello release manager, acme-tiny is a tiny script to issue and renew TLS certs from Let's Encrypt using acme protocol. The actual version of acme-tiny in Debian/stable (20160801-3) doesn't works due to an hard-coded and outdated version of the subscriber agreement. Please see https://bugs.debian.org/882693 This issue was fixed in testing with the version 20171115-1. This stretch-p-u build fine in stretch, please see the debdiff attached. Any issues to not accept acme-tiny_20160801-3+deb9u1 as a stretch-p-u? Thanks in advance! Ps: For myself, I'm not sure, source-only uploads works for p-u ?
diff -Nru acme-tiny-20160801/debian/changelog acme-tiny-20160801/debian/changelog --- acme-tiny-20160801/debian/changelog 2017-03-12 18:33:56.000000000 +0000 +++ acme-tiny-20160801/debian/changelog 2018-02-21 23:46:50.000000000 +0000 @@ -1,3 +1,9 @@ +acme-tiny (20160801-3+deb9u1) stable-proposed-updates; urgency=medium + + * Fix outdated version of the subscriber agreement (Closes: #882693) + + -- Sebastien Badia <sba...@debian.org> Thu, 22 Feb 2018 00:46:50 +0100 + acme-tiny (20160801-3) unstable; urgency=medium * update personal email address diff -Nru acme-tiny-20160801/debian/patches/0005-fix-outdated-subscriber-agreement.patch acme-tiny-20160801/debian/patches/0005-fix-outdated-subscriber-agreement.patch --- acme-tiny-20160801/debian/patches/0005-fix-outdated-subscriber-agreement.patch 1970-01-01 00:00:00.000000000 +0000 +++ acme-tiny-20160801/debian/patches/0005-fix-outdated-subscriber-agreement.patch 2018-02-21 23:46:50.000000000 +0000 @@ -0,0 +1,20 @@ +Description: Update outdated version of the subscriber agreement +Author: Daniel Roesler <diaf...@gmail.com> +Bug-Debian: https://bugs.debian.org/882693 +Origin: upstream, https://github.com/diafygi/acme-tiny/commit/19b274cf38544ad9ccc69aa140969c30c4e0d8fd +Bug: https://github.com/diafygi/acme-tiny/pull/145 +Forwarded: not-needed +Reviewed-By: Sebastien Badia <sba...@debian.org> +Last-Update: 2018-02-22 + +--- acme-tiny-20160801.orig/acme_tiny.py ++++ acme-tiny-20160801/acme_tiny.py +@@ -82,7 +82,7 @@ def get_crt(account_key, csr, acme_dir, + log.info("Registering account...") + code, result = _send_signed_request(CA + "/acme/new-reg", { + "resource": "new-reg", +- "agreement": "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf", ++ "agreement": json.loads(urlopen(CA + "/directory").read().decode('utf8'))['meta']['terms-of-service'], + }) + if code == 201: + log.info("Registered!") diff -Nru acme-tiny-20160801/debian/patches/series acme-tiny-20160801/debian/patches/series --- acme-tiny-20160801/debian/patches/series 2017-03-12 18:33:56.000000000 +0000 +++ acme-tiny-20160801/debian/patches/series 2018-02-21 23:46:50.000000000 +0000 @@ -2,3 +2,4 @@ 0002-readme-replace-usr-bin-sh-by-bin-sh.patch 0003-fix-855962-fail-to-parse-openssl-1.1-CSR-output.patch 0004-update-my-personal-email-address.patch +0005-fix-outdated-subscriber-agreement.patch