Your message dated Wed, 27 Jan 2016 22:29:58 +0000
with message-id <e1aoyb8-0001rz...@franck.debian.org>
and subject line Bug#807876: fixed in strip-nondeterminism 0.015-1
has caused the Debian Bug report #807876,
regarding strip-nondeterminism: should ignore signed JARs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
807876: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=807876
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: strip-nondeterminism
Severity: wishlist

It would be nice for strip-nondeterminism to ignore signed JARs (but
print a warning), since its modifications will break the signature.

According to the jarsigner(1) man page, a signed JAR will have .DSA
and .SF files in the META-INF, so we can look for those.

An example of a signed JAR can be found in
git://git.kali.org/packages/dirbuster.git

--- End Message ---
--- Begin Message ---
Source: strip-nondeterminism
Source-Version: 0.015-1

We believe that the bug you reported is fixed in the latest version of
strip-nondeterminism, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 807...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrew Ayer <a...@andrewayer.name> (supplier of updated strip-nondeterminism 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 27 Jan 2016 12:20:26 -0800
Source: strip-nondeterminism
Binary: libfile-stripnondeterminism-perl strip-nondeterminism 
dh-strip-nondeterminism
Architecture: source
Version: 0.015-1
Distribution: unstable
Urgency: medium
Maintainer: Reproducible builds folks 
<reproducible-builds@lists.alioth.debian.org>
Changed-By: Andrew Ayer <a...@andrewayer.name>
Description:
 dh-strip-nondeterminism - debhelper add-on to strip non-determinism from files
 libfile-stripnondeterminism-perl - Perl module for stripping non-determinism 
from files
 strip-nondeterminism - tool for stripping non-determinism from files
Closes: 807669 807876
Changes:
 strip-nondeterminism (0.015-1) unstable; urgency=medium
 .
   * New upstream release:
     - jar: ignore signed JAR files (Closes: #807876, #807669)
Checksums-Sha1:
 3b792d387bb41a9fb8dbc3bb2e66e0d3e9cc1c4e 2264 strip-nondeterminism_0.015-1.dsc
 e53622b23edc9bb67c44ed3133a0fee5b8095baf 24760 
strip-nondeterminism_0.015.orig.tar.gz
 5047837244657d4b960a9facf1769b8a2383eea0 3804 
strip-nondeterminism_0.015-1.debian.tar.xz
Checksums-Sha256:
 0bd79acbe72c1dd844adf13c0a84cf64fcffb20162b7320297be1b34a7a7db3a 2264 
strip-nondeterminism_0.015-1.dsc
 c0b1a84e7f28dff5981f2beb359575b184fcf0f669ef010140f2cecf0ea091f4 24760 
strip-nondeterminism_0.015.orig.tar.gz
 812d02b31ccb4f8d87885c8d86c6a53f08ad0be61bc97b4d3645748c2a7e7dab 3804 
strip-nondeterminism_0.015-1.debian.tar.xz
Files:
 27bb346f6bb5d329cefa31fab4952b72 2264 perl optional 
strip-nondeterminism_0.015-1.dsc
 3002b944599feaa943ba8dfd0e61d472 24760 perl optional 
strip-nondeterminism_0.015.orig.tar.gz
 f85f17826869fdc1b16eb9f938b56c75 3804 perl optional 
strip-nondeterminism_0.015-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=EzKV
-----END PGP SIGNATURE-----

--- End Message ---
_______________________________________________
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

Reply via email to