[Freeipa] [Bug 1858967] Re: RM: dogtag-pki RC buggy, not in testing or stable

2020-01-08 Thread Timo Aaltonen
dogtag-pki is in unstable because openjdk-8 will never migrate in
Debian, whereas on Ubuntu it is supported again since eoan

and it works just fine with current nss, and supports TLS 1.3 via jss
but has issues with jdk11 as the upstream bug shows

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1858967

Title:
  RM: dogtag-pki RC buggy, not in testing or stable

Status in dogtag-pki package in Ubuntu:
  Fix Released
Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  RM: RC buggy, not in testing or stable

  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088

  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  Please remove dogtag-pki and its only reverse-depends freeipa

  nss now uses tls v1.2 min, and v1.3 max, potentially exposing above
  issues further.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/1858967/+subscriptions

___
Mailing list: https://launchpad.net/~freeipa
Post to : freeipa@lists.launchpad.net
Unsubscribe : https://launchpad.net/~freeipa
More help   : https://help.launchpad.net/ListHelp


[Freeipa] [Bug 1858967] Re: RM: dogtag-pki RC buggy, not in testing or stable

2020-01-08 Thread Steve Langasek
Removing packages from focal:
dogtag-pki 10.7.3-4 in focal
dogtag-pki 10.7.3-4 in focal amd64
dogtag-pki 10.7.3-4 in focal arm64
dogtag-pki 10.7.3-4 in focal armhf
dogtag-pki 10.7.3-4 in focal i386
dogtag-pki 10.7.3-4 in focal ppc64el
dogtag-pki 10.7.3-4 in focal s390x
dogtag-pki-console-theme 10.7.3-4 in focal amd64
dogtag-pki-console-theme 10.7.3-4 in focal arm64
dogtag-pki-console-theme 10.7.3-4 in focal armhf
dogtag-pki-console-theme 10.7.3-4 in focal i386
dogtag-pki-console-theme 10.7.3-4 in focal ppc64el
dogtag-pki-console-theme 10.7.3-4 in focal s390x
dogtag-pki-server-theme 10.7.3-4 in focal amd64
dogtag-pki-server-theme 10.7.3-4 in focal arm64
dogtag-pki-server-theme 10.7.3-4 in focal armhf
dogtag-pki-server-theme 10.7.3-4 in focal i386
dogtag-pki-server-theme 10.7.3-4 in focal ppc64el
dogtag-pki-server-theme 10.7.3-4 in focal s390x
libsymkey-java 10.7.3-4 in focal amd64
libsymkey-java 10.7.3-4 in focal arm64
libsymkey-java 10.7.3-4 in focal armhf
libsymkey-java 10.7.3-4 in focal i386
libsymkey-java 10.7.3-4 in focal ppc64el
libsymkey-java 10.7.3-4 in focal s390x
libsymkey-jni 10.7.3-4 in focal amd64
libsymkey-jni 10.7.3-4 in focal arm64
libsymkey-jni 10.7.3-4 in focal armhf
libsymkey-jni 10.7.3-4 in focal ppc64el
libsymkey-jni 10.7.3-4 in focal s390x
pki-base 10.7.3-4 in focal amd64
pki-base 10.7.3-4 in focal arm64
pki-base 10.7.3-4 in focal armhf
pki-base 10.7.3-4 in focal i386
pki-base 10.7.3-4 in focal ppc64el
pki-base 10.7.3-4 in focal s390x
pki-base-java 10.7.3-4 in focal amd64
pki-base-java 10.7.3-4 in focal arm64
pki-base-java 10.7.3-4 in focal armhf
pki-base-java 10.7.3-4 in focal i386
pki-base-java 10.7.3-4 in focal ppc64el
pki-base-java 10.7.3-4 in focal s390x
pki-ca 10.7.3-4 in focal amd64
pki-ca 10.7.3-4 in focal arm64
pki-ca 10.7.3-4 in focal armhf
pki-ca 10.7.3-4 in focal i386
pki-ca 10.7.3-4 in focal ppc64el
pki-ca 10.7.3-4 in focal s390x
pki-console 10.7.3-4 in focal amd64
pki-console 10.7.3-4 in focal arm64
pki-console 10.7.3-4 in focal armhf
pki-console 10.7.3-4 in focal i386
pki-console 10.7.3-4 in focal ppc64el
pki-console 10.7.3-4 in focal s390x
pki-javadoc 10.7.3-4 in focal amd64
pki-javadoc 10.7.3-4 in focal arm64
pki-javadoc 10.7.3-4 in focal armhf
pki-javadoc 10.7.3-4 in focal i386
pki-javadoc 10.7.3-4 in focal ppc64el
pki-javadoc 10.7.3-4 in focal s390x
pki-kra 10.7.3-4 in focal amd64
pki-kra 10.7.3-4 in focal arm64
pki-kra 10.7.3-4 in focal armhf
pki-kra 10.7.3-4 in focal i386
pki-kra 10.7.3-4 in focal ppc64el
pki-kra 10.7.3-4 in focal s390x
pki-ocsp 10.7.3-4 in focal amd64
pki-ocsp 10.7.3-4 in focal arm64
pki-ocsp 10.7.3-4 in focal armhf
pki-ocsp 10.7.3-4 in focal i386
pki-ocsp 10.7.3-4 in focal ppc64el
pki-ocsp 10.7.3-4 in focal s390x
pki-server 10.7.3-4 in focal amd64
pki-server 10.7.3-4 in focal arm64
pki-server 10.7.3-4 in focal armhf
pki-server 10.7.3-4 in focal ppc64el
pki-server 10.7.3-4 in focal s390x
pki-tks 10.7.3-4 in focal amd64
pki-tks 10.7.3-4 in focal arm64
pki-tks 10.7.3-4 in focal armhf
pki-tks 10.7.3-4 in focal i386
pki-tks 10.7.3-4 in focal ppc64el
pki-tks 10.7.3-4 in focal s390x
pki-tools 10.7.3-4 in focal amd64
pki-tools 10.7.3-4 in focal arm64
pki-tools 10.7.3-4 in focal armhf
pki-tools 10.7.3-4 in focal ppc64el
pki-tools 10.7.3-4 in focal s390x
pki-tps 10.7.3-4 in focal amd64
pki-tps 10.7.3-4 in focal arm64
pki-tps 10.7.3-4 in focal armhf
pki-tps 10.7.3-4 in focal i386
pki-tps 10.7.3-4 in focal ppc64el
pki-tps 10.7.3-4 in focal s390x
pki-tps-client 10.7.3-4 in 

[Freeipa] [Bug 1858967] Re: RM: dogtag-pki RC buggy, not in testing or stable

2020-01-08 Thread Steve Langasek
Removing packages from focal:
freeipa 4.8.3-1 in focal
freeipa-admintools 4.8.3-1 in focal amd64
freeipa-admintools 4.8.3-1 in focal arm64
freeipa-admintools 4.8.3-1 in focal armhf
freeipa-admintools 4.8.3-1 in focal ppc64el
freeipa-admintools 4.8.3-1 in focal s390x
freeipa-client 4.8.3-1 in focal amd64
freeipa-client 4.8.3-1 in focal arm64
freeipa-client 4.8.3-1 in focal armhf
freeipa-client 4.8.3-1 in focal ppc64el
freeipa-client 4.8.3-1 in focal s390x
freeipa-client-samba 4.8.3-1 in focal amd64
freeipa-client-samba 4.8.3-1 in focal arm64
freeipa-client-samba 4.8.3-1 in focal armhf
freeipa-client-samba 4.8.3-1 in focal ppc64el
freeipa-client-samba 4.8.3-1 in focal s390x
freeipa-common 4.8.3-1 in focal amd64
freeipa-common 4.8.3-1 in focal arm64
freeipa-common 4.8.3-1 in focal armhf
freeipa-common 4.8.3-1 in focal i386
freeipa-common 4.8.3-1 in focal ppc64el
freeipa-common 4.8.3-1 in focal s390x
freeipa-server 4.8.3-1 in focal amd64
freeipa-server 4.8.3-1 in focal arm64
freeipa-server 4.8.3-1 in focal armhf
freeipa-server 4.8.3-1 in focal ppc64el
freeipa-server 4.8.3-1 in focal s390x
freeipa-server-dns 4.8.3-1 in focal amd64
freeipa-server-dns 4.8.3-1 in focal arm64
freeipa-server-dns 4.8.3-1 in focal armhf
freeipa-server-dns 4.8.3-1 in focal i386
freeipa-server-dns 4.8.3-1 in focal ppc64el
freeipa-server-dns 4.8.3-1 in focal s390x
freeipa-server-trust-ad 4.8.3-1 in focal amd64
freeipa-server-trust-ad 4.8.3-1 in focal arm64
freeipa-server-trust-ad 4.8.3-1 in focal armhf
freeipa-server-trust-ad 4.8.3-1 in focal ppc64el
freeipa-server-trust-ad 4.8.3-1 in focal s390x
freeipa-tests 4.8.3-1 in focal amd64
freeipa-tests 4.8.3-1 in focal arm64
freeipa-tests 4.8.3-1 in focal armhf
freeipa-tests 4.8.3-1 in focal i386
freeipa-tests 4.8.3-1 in focal ppc64el
freeipa-tests 4.8.3-1 in focal s390x
python3-ipaclient 4.8.3-1 in focal amd64
python3-ipaclient 4.8.3-1 in focal arm64
python3-ipaclient 4.8.3-1 in focal armhf
python3-ipaclient 4.8.3-1 in focal i386
python3-ipaclient 4.8.3-1 in focal ppc64el
python3-ipaclient 4.8.3-1 in focal s390x
python3-ipalib 4.8.3-1 in focal amd64
python3-ipalib 4.8.3-1 in focal arm64
python3-ipalib 4.8.3-1 in focal armhf
python3-ipalib 4.8.3-1 in focal i386
python3-ipalib 4.8.3-1 in focal ppc64el
python3-ipalib 4.8.3-1 in focal s390x
python3-ipaserver 4.8.3-1 in focal amd64
python3-ipaserver 4.8.3-1 in focal arm64
python3-ipaserver 4.8.3-1 in focal armhf
python3-ipaserver 4.8.3-1 in focal i386
python3-ipaserver 4.8.3-1 in focal ppc64el
python3-ipaserver 4.8.3-1 in focal s390x
python3-ipatests 4.8.3-1 in focal amd64
python3-ipatests 4.8.3-1 in focal arm64
python3-ipatests 4.8.3-1 in focal armhf
python3-ipatests 4.8.3-1 in focal i386
python3-ipatests 4.8.3-1 in focal ppc64el
python3-ipatests 4.8.3-1 in focal s390x
Comment: removed from testing (Debian bugs #920725, #921926), depends on broken 
dogtag-pki
1 package successfully removed.


** Changed in: freeipa (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1858967

Title:
  RM: dogtag-pki RC buggy, not in testing or stable

Status in dogtag-pki package in Ubuntu:
  Fix Released
Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  RM: RC buggy, not in testing or stable

  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088

  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  Please remove dogtag-pki and its only reverse-depends freeipa

  nss now uses tls v1.2 min, and v1.3 max,