[Letsencrypt-devel] Bug#861513: Bug#861513: python-certbot: Missing dependency on python-ndg-httpsclient from jessie-backports

[Harlan Lieberman-Berg]

Hm.  Yes, that's true.  This is because the python-requests dependency
on python-ndg-httpsclient is only a Recommends, but the part of the
code that certbot depends on (the requests "security" extra) has a
hard dependency.

I'll add a patch to put it in our dependencies for now; because of the
freeze, it'll take several days or longer to make it into
jessie-backports and stretch.  I've also opened up a wishlist item
against python-requests to ship something that we can add a Depends on
to help prevent this in the future.  (That's bug #861517, if you want
to follow along at home.)

That being said... there's a sense these days that systems which don't
install Recommends' may be subject to breakage.  I know a lot of
support channels will simply refuse to help on systems without
recommends enabled, just because of the bizarre behavior that can
result.  I agree this case a Depends is certainly the right
designation, but... in general, hic sunt draconis.

Sincerely,

-- 
Harlan Lieberman-Berg
~hlieberman

___
Letsencrypt-devel mailing list
Letsencrypt-devel@lists.alioth.debian.org
https://lists.alioth.debian.org/mailman/listinfo/letsencrypt-devel

[Letsencrypt-devel] Bug#861513: python-certbot: Missing dependency on python-ndg-httpsclient from jessie-backports

[John Morahan]

Package: python-certbot
Version: 0.10.2-1~bpo8+1
Severity: important

Dear Maintainer,

Some certbot users reported errors after installing from jessie-backports:

$ certbot --help
Traceback (most recent call last):
  File "/usr/bin/certbot", line 6, in 
from pkg_resources import load_entry_point
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3019, 
in 
@_call_aside
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3003, 
in _call_aside
f(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3032, 
in _initialize_master_working_set
working_set = WorkingSet._build_master()
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 655, 
in _build_master
ws.require(__requires__)
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 963, 
in require
needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 849, 
in resolve
raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'ndg-httpsclient; extra == "security"' 
distribution was not found and is required by requests

I noticed that python-requests recommends python-ndg-httpsclient but neither
it nor any certbot package explicitly depends on it. However certbot appears
to be completely unusable without it.
I was able to reproduce these errors by installing with:
sudo apt install certbot -t jessie-backports --no-install-recommends

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-certbot depends on:
ii  python-acme0.10.2-1~bpo8+1
ii  python-configargparse  0.11.0-1~bpo8+1
ii  python-configobj   5.0.6-1
ii  python-cryptography1.3.4-1~bpo8+2
ii  python-mock1.0.1-3
ii  python-openssl 16.0.0-1~bpo8+1
ii  python-parsedatetime   1.4-1
ii  python-requests2.11.1-1~bpo8+1
ii  python-rfc3339 1.0-4~bpo8+1
ii  python-setuptools  33.1.1-1~bpo8+1
ii  python-six 1.8.0-1
ii  python-tz  2012c+dfsg-0.1
ii  python-zope.component  4.2.1-2
ii  python-zope.interface  4.1.1-3.1
pn  python:any 

Versions of packages python-certbot recommends:
ii  certbot0.10.2-1~bpo8+1
pn  python-psutil  

Versions of packages python-certbot suggests:
pn  python-certbot-doc  

-- no debconf information

___
Letsencrypt-devel mailing list
Letsencrypt-devel@lists.alioth.debian.org
https://lists.alioth.debian.org/mailman/listinfo/letsencrypt-devel