Source: libwebsockets Version: 1.7.3-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi, Whilst working on the "reproducible builds" effort [0], we noticed that libwebsockets could not be built reproducibly. Patch attached. Whilst it uses a deterministic key (!!), this is a) a test server and b) key was not being varied for each installation prior to this patch, so it is "no worse". [0] https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
--- a/debian/keys/libwebsockets-test-server.key.pem 1970-01-01 02:00:00.000000000 +0200 --- b/debian/keys/libwebsockets-test-server.key.pem 2016-07-17 13:53:45.083618700 +0200 @@ -0,0 +1,16 @@ +-----BEGIN PRIVATE KEY----- +MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAM8ZUC3tOkX70b0x +I9wneuXYkaCuwnH4RJ7INmYKzHAJG1Efu54w774mSi1dcoyBDY9z9fjHPLFIweV8 +UOqeWpTdyYjN30lnEyZAan1Or7LQsJyiMUpJ8GlGTOi9ZMEPNO8KF780RhWoa/h8 +8+GCboTAcNOf47HK42y7kREYiFOlAgMBAAECgYAHqCDtwcKQydGkVAfGYPNLQimI +Lk3kFtC6qh5QwX9zePK4mhq+q4KBnjrJ2JWemjrdHeVvMDaPO2hnyqPXOMmSfFml +O1P1psR5NW5wSBcYE11Meg6gEarkPu3jiRvCxkeQIRn0L1MxNerSzOkNwEqCQ1vH +kOZlrSdv59BbM47lYQJBAPhJ5QfcECG4axwqs/jBbBibit4BooEGInH03MYCaaUr +XDf2uSQqYRMdOHBcfCTjPrAugI/U1cmXYJAXJYDbLXkCQQDVh+zIhzAbm5rtWKVA +cXsuRQ2btbeaHVEYyykgjtWPnVcpY/ppWJx7hj+aE+RuUMnUCB3z2i7HmRAofYLK +6IiNAkEAkjXpslwr/797C8Y13zn/7unBuAScboBvTk4UqGIJVmOXVblrw1lVew0N +DFXaIVrUsqlfudNq5eDH03Jd+miXeQJAAx1kethd/0kZzXSJlJMTNO2U8TyJXRoo +YLA1/V+YBexJpTTsJjVAsxyWOO0pW+KZzxn/Ndts60R0U+Lg0Yzq0QJBAL9v/cqP +sBXBbTDp4ZxTCfWh4uOQNn748FK6mBfclBk3+IOwx7/1anmv3+O3bTinV2KuyW8F +IYYyvBhRllIRUD4= +-----END PRIVATE KEY----- --- a/debian/keys/libwebsockets-test-server.pem 1970-01-01 02:00:00.000000000 +0200 --- b/debian/keys/libwebsockets-test-server.pem 2016-07-17 13:53:51.091669875 +0200 @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE----- +MIIC3DCCAkWgAwIBAgIJAPTZ5EUcA04BMA0GCSqGSIb3DQEBCwUAMIGGMQswCQYD +VQQGEwJHQjEQMA4GA1UECAwHRXJld2hvbjETMBEGA1UEBwwKQWxsIGFyb3VuZDEb +MBkGA1UECgwSbGlid2Vic29ja2V0cy10ZXN0MRIwEAYDVQQDDAlsb2NhbGhvc3Qx +HzAdBgkqhkiG9w0BCQEWEG5vbmVAaW52YWxpZC5vcmcwHhcNMTYwNzE3MTEyMzAy +WhcNNDMxMjAzMTEyMzAyWjCBhjELMAkGA1UEBhMCR0IxEDAOBgNVBAgMB0VyZXdo +b24xEzARBgNVBAcMCkFsbCBhcm91bmQxGzAZBgNVBAoMEmxpYndlYnNvY2tldHMt +dGVzdDESMBAGA1UEAwwJbG9jYWxob3N0MR8wHQYJKoZIhvcNAQkBFhBub25lQGlu +dmFsaWQub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPGVAt7TpF+9G9 +MSPcJ3rl2JGgrsJx+ESeyDZmCsxwCRtRH7ueMO++JkotXXKMgQ2Pc/X4xzyxSMHl +fFDqnlqU3cmIzd9JZxMmQGp9Tq+y0LCcojFKSfBpRkzovWTBDzTvChe/NEYVqGv4 +fPPhgm6EwHDTn+OxyuNsu5ERGIhTpQIDAQABo1AwTjAdBgNVHQ4EFgQUfBTyeWQo +M3FwTh5Z2uGrpkLNBdIwHwYDVR0jBBgwFoAUfBTyeWQoM3FwTh5Z2uGrpkLNBdIw +DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQAw4SDtCjUwBQEaRWJebmbv +BFRyAj3TJXJHy58K6rR3ejKnTkhfoUO3pcls+kbANbUuaD+hQs8KGA2sb8yG6aYI +QVkZKTwK+lqQ5I0PRwXsnz7qmGySjgQPfDZTSB0VPjXA0QAjibObi+QKKXl6J4ed +432JtwMXX/wQ+iJtjUAEOg== +-----END CERTIFICATE----- --- a/debian/libwebsockets-test-server-common.install 2016-07-17 13:22:43.963341073 +0200 --- b/debian/libwebsockets-test-server-common.install 2016-07-17 13:57:15.969410550 +0200 @@ -1 +1,2 @@ usr/share/libwebsockets-test-server/* +debian/keys/* usr/share/libwebsockets-test-server
_______________________________________________ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
