Your message dated Tue, 10 Nov 2015 00:19:03 +0000
with message-id <e1zvwen-0008mf...@franck.debian.org>
and subject line Bug#804600: fixed in strip-nondeterminism 0.014-1
has caused the Debian Bug report #804600,
regarding dh-strip-nondeterminism: Breaks crypto signatures on Mono packages,
breaking pkg installs
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
804600: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804600
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dh-strip-nondeterminism
Version: 0.013-1
Severity: important
Dear Maintainer,
dh_strip_nondeterminism is now called by default in "dh $@" style debhelper
packages.
Unfortunately, the default behaviour will strip crypto signing from libraries,
which is required for them to be installed in a systemwide location - as such,
this breaks installation of any library packages rebuilt since
dh_strip_nondeterminism became a default command.
I appreciate the intention of the tool, but it would be extremely useful if it
could skip files of type "PE32 executable (console) Intel 80386 Mono/.Net
assembly, for MS Windows", certainly if they contain a StrongName signature.
The issue with determinism is a short-term issue anyway - libraries built with
Mono 4.0+ (as found in Experimental) are deterministic, but this issue has set
back my efforts on that transition considerably. I now need to do fifty
sourceful uploads with "override_dh_strip_nondeterminism" stanzas added.
------------
root@marceline:/tmp# sn -k hellokey.snk
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
A new 1024 bits strong name keypair has been generated in file 'hellokey.snk'.
root@marceline:/tmp# cat hello.cs
public class Hello1
{
public static void Main()
{
System.Console.WriteLine("Hello, World!");
}
}
root@marceline:/tmp# mcs -keyfile:hellokey.snk hello.cs
root@marceline:/tmp# sn -v hello.exe
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
Assembly hello.exe is strongnamed.
root@marceline:/tmp# strip-nondeterminism hello.exe
root@marceline:/tmp# sn -v hello.exe
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
Assembly hello.exe is delay-signed but not strongnamed
-- System Information:
Debian Release: jessie/sid
APT prefers wily-updates
APT policy: (500, 'wily-updates'), (500, 'wily-security'), (500, 'wily'),
(100, 'wily-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.2.0-16-generic (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---
Source: strip-nondeterminism
Source-Version: 0.014-1
We believe that the bug you reported is fixed in the latest version of
strip-nondeterminism, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 804...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <la...@debian.org> (supplier of updated strip-nondeterminism package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 10 Nov 2015 00:08:28 +0000
Source: strip-nondeterminism
Binary: libfile-stripnondeterminism-perl strip-nondeterminism
dh-strip-nondeterminism
Architecture: source all
Version: 0.014-1
Distribution: unstable
Urgency: medium
Maintainer: Reproducible builds folks
<reproducible-builds@lists.alioth.debian.org>
Changed-By: Chris Lamb <la...@debian.org>
Description:
dh-strip-nondeterminism - debhelper add-on to strip non-determinism from files
libfile-stripnondeterminism-perl - Perl module for stripping non-determinism
from files
strip-nondeterminism - tool for stripping non-determinism from files
Closes: 804600
Changes:
strip-nondeterminism (0.014-1) unstable; urgency=medium
.
* New upstream release:
- Disable stripping Mono binaries as it is too aggressive re. StrongName,
preventing package installs in a systemwide location (Closes: #804600)
* Add myself to Uploaders.
Checksums-Sha1:
4762e9b9e51a92bcc5be60e7005592e785e1906c 2282 strip-nondeterminism_0.014-1.dsc
b163d7819ccbf645ab61e8657a379da0a6c45110 24623
strip-nondeterminism_0.014.orig.tar.gz
2df8ef99eb6b720b3d43c6ff6c7367620a796ed1 3752
strip-nondeterminism_0.014-1.debian.tar.xz
d856d1f53136aa5b6b7ff06792edc56d452cc085 7472
dh-strip-nondeterminism_0.014-1_all.deb
b770131197afa6efbae053967302e7c3a102edae 10638
libfile-stripnondeterminism-perl_0.014-1_all.deb
7cca6c43668989c37b86ddb8cc19b68563602ca1 7440
strip-nondeterminism_0.014-1_all.deb
Checksums-Sha256:
b867546ea70de9036ae3bdd4a28c5e1018d68e3b9952ce170e91defec25f8c42 2282
strip-nondeterminism_0.014-1.dsc
2f98f114a419b2d4f4a8c8eb464bac3f0c53982bd4645d85d23e1e94536c2d7a 24623
strip-nondeterminism_0.014.orig.tar.gz
50911cbb2f59395e4c9a78019a09df4464f1a58ffa69395813cac6b6e1ea17b3 3752
strip-nondeterminism_0.014-1.debian.tar.xz
70bb16c15512accf69811cd6a19c5f441a928565587dd75c5ebc07e81cdad9f9 7472
dh-strip-nondeterminism_0.014-1_all.deb
6feb7bf0da4cf3c5779dbd2e5fc0eca2730d1573ed87750b07ba3757f08d9dbd 10638
libfile-stripnondeterminism-perl_0.014-1_all.deb
13e268421d6bd92849a9522569d733ba2c35c36bf7527a402158530a7279be85 7440
strip-nondeterminism_0.014-1_all.deb
Files:
9d327313952cebea3609e80a18cfc2a8 2282 perl optional
strip-nondeterminism_0.014-1.dsc
0d1979f383111ce32f0183af1b12c6fd 24623 perl optional
strip-nondeterminism_0.014.orig.tar.gz
08bf67e312431c0cf978affa956fa3d6 3752 perl optional
strip-nondeterminism_0.014-1.debian.tar.xz
607d66ec8682a8b11e98d07a14b45404 7472 perl optional
dh-strip-nondeterminism_0.014-1_all.deb
9cce5b2ab775e58bbc48e33722d18b6b 10638 perl optional
libfile-stripnondeterminism-perl_0.014-1_all.deb
644e29bfb80505600301444c44d7d424 7440 perl optional
strip-nondeterminism_0.014-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=/rqA
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
