[Bug 834368] Re: doesn't create /var/run/openct/status via init.d script

2011-08-28 Thread Andreas Jellinghaus
openct creates the status file to tell which readers are available (even if 
there are none).
if you forget to install openct or it is not started at boot time, the status 
file is missing.
thus if opensc complains about the missing status file, that is a good thing - 
telling users
why the software does not work as expected, so they can fix it.

if you don't want openct subsystem in opensc, edit the config and
disable it, as shown in the FAQ.

** Changed in: openct (Ubuntu)
   Status: Confirmed = Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/834368

Title:
  doesn't create /var/run/openct/status via init.d script

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openct/+bug/834368/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 834368] Re: doesn't create /var/run/openct/status via init.d script

2011-08-26 Thread Andreas Jellinghaus
you forgot to install the openct package.
libopenct is used to access the service provided by openct.

as alternative, you can configure opensc to use pcsc subsystem instead.

all this is documented in the FAQ as far as I know, so I think the bug
is invalid.

** Changed in: openct (Ubuntu)
   Status: New = Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/834368

Title:
  doesn't create /var/run/openct/status via init.d script

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openct/+bug/834368/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 294648] Re: svn over https with client certificates broken (regression in intrepid)

2010-12-20 Thread Andreas Jellinghaus
you could also try:

svn co https://www.opensc-project.org/svn/test/

works with libneon27 0.29.0-1 on 10.04, but only if LD_PRELOAD hack is
used.

Thats a live subversion server for the opensc project.

Regards, Andreas

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/294648

Title:
  svn over https with client certificates broken (regression in intrepid)

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 294648] Re: svn over https with client certificates broken (regression in intrepid)

2010-09-05 Thread Andreas Jellinghaus
alias svn='LD_PRELOAD=/usr/lib/libneon.so.27 svn'

also you need the libneon27 package installed,
only libneon27-gnutls is not enough.

Regards, Andreas

Am Sonntag 05 September 2010, um 14:25:39 schrieben Sie:
 Hi, I've had problems since upgrading from Hardy to Lucid:
 
 $ svn update
 svn: OPTIONS of 'https://svn.example.com/path/to/svn/trunk': SSL handshake
 failed: SSL error: A TLS warning alert has been received.
 (https://svn.example.com)
 
 I assume the old svn client version was 1.4.6:
 http://packages.ubuntu.com/hardy/subversion The new version is 1.6.6.
 
 The repository has other users for whom it continues to work.
 
 Could this be the same problem? Using libneon instead of libneon-gnutls
 has not helped, only changed the error message slightly:
 
 svn: OPTIONS of 'https://svn.example.com/path/to/svn/trunk': SSL
 handshake failed: SSL error code -1/1/336032856
 (https://svn.example.com)
 
 Any other ideas?

-- 
svn over https with client certificates broken (regression in intrepid)
https://bugs.launchpad.net/bugs/294648
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 565252] [NEW] latest opensc code for openssl engine broken

2010-04-17 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: opensc

openssl and applications based on openssl such as wpa_supplicant can use
smart cards. to do that they load an engine, for example engine_pkcs11, and
that engine loads the smart card library, for example opensc-pkcs11.so.

that used to work very fine, and still does for command line operations.
however if configured with a config file, it is broken in the latest release 
0.11.13:
a new code for the GOST encryption algorithm broke the general code,
and thus should be reverted:

in opensc-0.11.13/src/pkcs11/openssl.c there's section

106 void
107 sc_pkcs11_register_openssl_mechanisms(struct sc_pkcs11_card *card)
108 {
109 #if OPENSSL_VERSION_NUMBER = 0x1000L
110 /* FIXME: see openssl-1.0.0-beta3/engines/ccgost/README.gost */
111 OPENSSL_config(NULL);
112 #endif

remove this part or comment out the OPENSSL_config(NULL) and it works again.
yes, it breaks gost support in opensc, but few people use the new gost support
(a special algorithm from russia as far as I know), and many people try to use
opensc with normal rsa cards (they are broken by that change).

of course we try to find a real solution, that works for both rsa and gost card
users. but we are not sure, if the real solution wouldn't be fixing openssl
or the gost engine for openssl instead of opensc.

so for now the best thing is to handle this regression and revert the change by
removing/commenting out the OPENSSL_config(NULL); code.

Regards, Andreas

** Affects: opensc (Ubuntu)
 Importance: Undecided
 Status: New

-- 
latest opensc code for openssl engine broken
https://bugs.launchpad.net/bugs/565252
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 380936] Re: opensc does not find libpcsclite which is now in /lib

2010-04-08 Thread Andreas Jellinghaus
please fix this in 9.10 too!
itis real easy - recompile with that simple option (or edit the default 
opensc.conf file).

Thanks, Andreas

-- 
opensc does not find libpcsclite which is now in /lib
https://bugs.launchpad.net/bugs/380936
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 536755] Re: Smartcard not detected

2010-04-08 Thread Andreas Jellinghaus
please try this:
* edit opensc.conf and set reader_drivers to pcsc only
* edit opensc.conf and set the proper path to libpcsclite.so.1

I guess both isn't properly configured. please let us know if this
helps, or if you still don't see the card.

Regards, Andreas

-- 
Smartcard not detected
https://bugs.launchpad.net/bugs/536755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 543320] [NEW] documentation missing

2010-03-21 Thread Andreas Jellinghaus
Public bug reported:

upstream had changes with their makefiles in doc/ so the *.html and *.css files
are now in a different directory and the debian/ubuntu packaging needs to be 
fixed.

** Affects: libp11 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
documentation missing
https://bugs.launchpad.net/bugs/543320
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 543320] Re: documentation missing

2010-03-21 Thread Andreas Jellinghaus

** Patch added: fix for this bug
   http://launchpadlibrarian.net/41498808/libp11.debdiff

-- 
documentation missing
https://bugs.launchpad.net/bugs/543320
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 543320] Re: documentation missing

2010-03-21 Thread Andreas Jellinghaus
oops, better patch attached.

** Attachment added: verified patch/debdiff
   http://launchpadlibrarian.net/41499541/libp11.debdiff

-- 
documentation missing
https://bugs.launchpad.net/bugs/543320
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 543334] [NEW] documentation missing

2010-03-21 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: opensc

In upstream source we moved the documentation around and
the debian/ubuntu packaging needs to be fixed, to include the
html and css files (from our wiki dump).

** Affects: opensc (Ubuntu)
 Importance: Undecided
 Status: New

-- 
documentation missing
https://bugs.launchpad.net/bugs/543334
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 543334] Re: documentation missing

2010-03-21 Thread Andreas Jellinghaus

** Patch added: patch to fix this issue
   http://launchpadlibrarian.net/41500510/opensc.debdiff

-- 
documentation missing
https://bugs.launchpad.net/bugs/543334
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 380936] Re: opensc does not find libpcsclite which is now in /lib

2010-03-21 Thread Andreas Jellinghaus
opensc (0.11.12-1ubuntu2) lucid; urgency=low

  [ Dominik Fischer ]
  * debian/rules: build with --with-pcsc-provider=/lib/libpcsclite.so.1,
as this is the path of libpcsclite in jaunty and above.
  * opensc.install: added westcos-tool + manpage

 -- Steve Langasek steve.langa...@ubuntu.com  Thu, 18 Feb 2010
02:52:33 -0800

seems this was fixed in 0.11.12-1ubuntu2 for lucid at least.

-- 
opensc does not find libpcsclite which is now in /lib
https://bugs.launchpad.net/bugs/380936
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 323089] Re: Loading /usr/lib64/opensc-pkcs11.so makes the Smart Card Reader to malfunction on Intrepid amd64

2010-03-21 Thread Andreas Jellinghaus
as far as I know dni isn't supported by opensc. instead you used a modified
opensc or an opensc with a plugin (and the modification/plugin isn't open 
source).
so there is little we can do without such cards and the source to that 
plugin/modification
to debug this.

please discuss the issue with the authors of the plugin/modification
instead.

-- 
Loading /usr/lib64/opensc-pkcs11.so makes the Smart Card Reader to malfunction 
on Intrepid amd64
https://bugs.launchpad.net/bugs/323089
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 536755] Re: Smartcard not detected

2010-03-21 Thread Andreas Jellinghaus
can you be more specific?
did opensc find the reader? opensc-tool --list-readers

did opensc see the atr? opensc-tool --atr

did opensc know what card this is? opensc-tool --name

if you can run these three commands for both versions, that would help!

-- 
Smartcard not detected
https://bugs.launchpad.net/bugs/536755
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519711] Re: outdated package

2010-03-21 Thread Andreas Jellinghaus
lucid now has 0.11.12

** Changed in: opensc (Ubuntu)
   Status: New = Fix Released

-- 
outdated package
https://bugs.launchpad.net/bugs/519711
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-02-18 Thread Andreas Jellinghaus
from copyright file:
 It was downloaded from http://www.opensc.org/
we lost that domain years ago. our homepage is www.opensc-project.org.

 Upstream Authors: 
that list is from 2001. Our wiki page AuthorsAndCredits has the full list,
and all the copryright statements (for opensc and software used by opensc
(autoconf/make/libtool, m4 macros, getpass source, getopt source, etc.)

btw: the doc/nonpersistent/wiki.out/* files should be shipped as part
of some package - our wiki documentation, converted so it can be used
as local documentation.

hmm,I though I had submitted a fix for that once, but maybe that was to debian 
and
it got lost somehow. I haven't found out how the debian/ubuntu sync works, and 
how
to make sure no improvements are lost.

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 520378] [NEW] small packaging issues

2010-02-11 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: openct

I recompiled openct 0.6.19-1ubuntu2 for karmic to test the new package, and
while doing that noticed a few issues left in packaging and fixed them:
* add a Build-Conflicts: libusb-dev so the native usb driver is used (works 
better)
* drop hal recommendation, add udev. It is a recommendation because it is 
needed for usb devices, but not for serial devices.
* update README.debian with details about udev instead of hal.
* upstream bug in doc/Makefile.* - fix the rm -rf api.out which is bogus.

** Affects: openct (Ubuntu)
 Importance: Undecided
 Status: Confirmed

-- 
small packaging issues
https://bugs.launchpad.net/bugs/520378
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 520378] Re: small packaging issues

2010-02-11 Thread Andreas Jellinghaus

** Patch added: fix all those minor build issues
   http://launchpadlibrarian.net/39054772/openct_debdiff

** Changed in: openct (Ubuntu)
   Status: New = Confirmed

-- 
small packaging issues
https://bugs.launchpad.net/bugs/520378
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519711] [NEW] outdated package

2010-02-10 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: opensc

please pull in opensc 0.11.12-1 from debian.
we fixed many, many bugs since 0.11.9 release, including a real big
issue with compatibility broken in 0.11.4 to 0.11.5 till 0.11.11 for some cards.

New in 0.11.12; 2009-12-18; Andreas Jellinghaus
* Document integer problem in OpenSC and implement workaround
* Improve entersafe profile to support private data objects

New in 0.11.11; 2009-10-26; Andreas Jellinghaus
* Now again compatible with OpenSSL 0.9.7 and OpenSSL 1.0.0
* A few warnings and minor bugs were fixed
* Updated myeid driver by Aventra

New in 0.11.10; 2009-10-20; Andreas Jellinghaus
* New westcos driver by François Leblanc
* Initial support for MyEid card (Aventra)
* GOST algorithm supported by Rutoken driver (Aleksey Samsonov)

the debian package is fine, simply pull it in and you are good.

** Affects: opensc (Ubuntu)
 Importance: Undecided
 Status: New

-- 
outdated package
https://bugs.launchpad.net/bugs/519711
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 519713] [NEW] package outdated

2010-02-10 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: openct

the current openct package is old and totaly broken, as ubuntu moved away from
hal, but didn't update openct package, which depends on hal (well Recommends,
as serial readers don't need hal, but USB readers do).

so please update the package before lucid is released/frozen/etc.

the issue: the debian package 0.6.19-1 is broken too, wasn't updated for hal 
either.
Two choices:
a) pull in my debianized openct from http://www.opensc-project.org/debian/ 
openct 0.6.19-0 package, which was tested on ubuntu and has all the build fixes
and works fine.
b) take a look at debian bug report system, collect all the patches I posted to 
various
bugs, apply them and build a package from that.
c) lets hope the debian maintainer will do b) soon, so pull in the next 
0.6.19-2 package,
once he has done that.

would be real nice to have this package working in ubuntu.

** Affects: openct (Ubuntu)
 Importance: Undecided
 Status: New

-- 
package outdated
https://bugs.launchpad.net/bugs/519713
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 215104] Re: mozilla-opensc should NONREPUDIATION key instead of SIGN key when creating a digital signature

2010-02-10 Thread Andreas Jellinghaus
on opensc-devel list we don't know any user of opensc-signer, and will drop
that code with opensc 0.12. please contact us on opensc-devel list if you
want to continue to use opensc-signer.

-- 
mozilla-opensc should NONREPUDIATION key instead of SIGN key when creating a 
digital signature
https://bugs.launchpad.net/bugs/215104
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519713] Re: package outdated

2010-02-10 Thread Andreas Jellinghaus

** Patch added: diff from 0.6.17-1 to 0.6.19-1 (except upstream changes) - if 
you prefer that one
   http://launchpadlibrarian.net/38998916/interdiff

-- 
package outdated
https://bugs.launchpad.net/bugs/519713
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519713] Re: package outdated

2010-02-10 Thread Andreas Jellinghaus

** Patch added: my diff.gz - add your changelog entry and you are ready to go
   http://launchpadlibrarian.net/38998647/openct_0.6.19-0.diff.gz

-- 
package outdated
https://bugs.launchpad.net/bugs/519713
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519713] Re: package outdated

2010-02-10 Thread Andreas Jellinghaus

** Patch added: debdiff - smaller, only the minimal changes. changed version 
to -1ubuntu1
   http://launchpadlibrarian.net/38999195/openct_debdiff

-- 
package outdated
https://bugs.launchpad.net/bugs/519713
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519750] [NEW] Sync opensc 0.11.12-1 (universe) from Debian testing (main)

2010-02-10 Thread Andreas Jellinghaus
Public bug reported:

Please sync opensc 0.11.12-1 (universe) from Debian testing (main)

Explanation of the Ubuntu delta and why it can be dropped:
Ubuntu backported a fix from 0.11.12 for a serious problem.
Since this is fixed in upstream 0.11.12, the patch can be dropped.

Changelog entries since current lucid version 0.11.9-2ubuntu1:

opensc (0.11.12-1) unstable; urgency=low

  * New upstream release. (Closes: #563671)
  * debian/source/format, debian/source/options,
debian/source/patch-header: Convert to v3 quilt format, with
single-debian-patch.
  * debian/rules: Enable documentation installation.
  * debian/control: Update description with advice from Andreas
Jellinghaus, with some editing. (Closes: #552516)
  * debian/libopensc2.symbols: Update for new symbols.
  * debian/libopensc2.shlibs: Remove in favor of the symbols file.

 -- Eric Dorland e...@debian.org  Sun, 10 Jan 2010 19:23:09 -0500

** Affects: opensc (Ubuntu)
 Importance: Undecided
 Status: New

-- 
Sync opensc 0.11.12-1 (universe) from Debian testing (main)
https://bugs.launchpad.net/bugs/519750
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519746] [NEW] Sync opensc 0.11.12-1 (universe) from Debian testing (main)

2010-02-10 Thread Andreas Jellinghaus
*** This bug is a duplicate of bug 519750 ***
https://bugs.launchpad.net/bugs/519750

Public bug reported:

Please sync opensc 0.11.12-1 (universe) from Debian testing (main)

Explanation of the Ubuntu delta and why it can be dropped:
Ubuntu backported a fix from 0.11.12 for a serious problem.
Since this is fixed in upstream 0.11.12, the patch can be dropped.

Changelog entries since current lucid version 0.11.9-2ubuntu1:

opensc (0.11.12-1) unstable; urgency=low

  * New upstream release. (Closes: #563671)
  * debian/source/format, debian/source/options,
debian/source/patch-header: Convert to v3 quilt format, with
single-debian-patch.
  * debian/rules: Enable documentation installation.
  * debian/control: Update description with advice from Andreas
Jellinghaus, with some editing. (Closes: #552516)
  * debian/libopensc2.symbols: Update for new symbols.
  * debian/libopensc2.shlibs: Remove in favor of the symbols file.

 -- Eric Dorland e...@debian.org  Sun, 10 Jan 2010 19:23:09 -0500

** Affects: opensc (Ubuntu)
 Importance: Undecided
 Status: New

** Changed in: opensc (Ubuntu)
   Status: New = Invalid

** Changed in: opensc (Ubuntu)
   Status: Invalid = New

** This bug has been marked a duplicate of bug 519750
   Sync opensc 0.11.12-1 (universe) from Debian testing (main)

-- 
Sync opensc 0.11.12-1 (universe) from Debian testing (main)
https://bugs.launchpad.net/bugs/519746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495511] Re: piv-tool (and subsequently, the rest of the opensc/openct suite) doesn't work as non-root

2010-02-10 Thread Andreas Jellinghaus
sure, this is a secure setup. only these can access smart cards:
* root of course
* all users in group scard. so add yourself and you will be fine (don't 
forget to logout/login).

bug should be closed as invalid.

** Changed in: opensc (Ubuntu)
   Status: New = Invalid

-- 
piv-tool (and subsequently, the rest of the opensc/openct suite) doesn't work 
as non-root
https://bugs.launchpad.net/bugs/495511
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 433874] Re: Debug and error information reported into a random bash terminal

2010-02-10 Thread Andreas Jellinghaus
1.) you can disable openct in /etc/opensc.conf (search for reader_driver).
2.) looks like a misconfiguration of your pam module - opening a new terminal
shouldn't run any opensc tool or load opensc-pkcs11 for any reason.

-- 
Debug and error information reported into a random bash terminal
https://bugs.launchpad.net/bugs/433874
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519750] Re: Sync opensc 0.11.12-1 (universe) from Debian testing (main)

2010-02-10 Thread Andreas Jellinghaus
oops, small issue: opensc-0.11.9/debian/mozilla-opensc.links 
needs to be copied over, as on debian this has different content (iceweasel 
vs.firefox etc.)
this is the ubuntu content:
usr/lib/opensc-signer.so usr/lib/firefox/plugins/opensc-signer.so
usr/lib/opensc-signer.so usr/lib/mozilla/plugins/opensc-signer.so
usr/lib/opensc-signer.so usr/lib/xulrunner-addons/plugins/opensc-signer.so

but if you forget to do that - no big harm. we haven't seen any user of that 
code in many years
(on upstream development lists).

-- 
Sync opensc 0.11.12-1 (universe) from Debian testing (main)
https://bugs.launchpad.net/bugs/519750
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-02-10 Thread Andreas Jellinghaus
currently lucid has 0.11.9-2ubuntu1 which does not contain the fix,
so it is a regression from the fixed ubuntu 0.11.8-1ubuntu2.

please have a look at bug519750:
if you simply import 0.11.12-1 from debian testing you can drop all ubuntu 
specific
changes and will have a working package. please do that, will fix this bug for 
lucid
as well!

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519711] Re: outdated package

2010-02-10 Thread Andreas Jellinghaus
oops, small issue: opensc-0.11.9/debian/mozilla-opensc.links
 needs to be copied over, as on debian this has different content (iceweasel 
vs.firefox etc.)
 this is the ubuntu content:
 usr/lib/opensc-signer.so usr/lib/firefox/plugins/opensc-signer.so
 usr/lib/opensc-signer.so usr/lib/mozilla/plugins/opensc-signer.so
 usr/lib/opensc-signer.so usr/lib/xulrunner-addons/plugins/opensc-signer.so
but if you forget to do that - no big harm. we haven't seen any user of that 
code in many years
 (on upstream development lists).

-- 
outdated package
https://bugs.launchpad.net/bugs/519711
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-02-10 Thread Andreas Jellinghaus
oops, small issue: opensc-0.11.9/debian/mozilla-opensc.links
 needs to be copied over, as on debian this has different content (iceweasel 
vs.firefox etc.)
 this is the ubuntu content:
 usr/lib/opensc-signer.so usr/lib/firefox/plugins/opensc-signer.so
 usr/lib/opensc-signer.so usr/lib/mozilla/plugins/opensc-signer.so
 usr/lib/opensc-signer.so usr/lib/xulrunner-addons/plugins/opensc-signer.so
but if you forget to do that - no big harm. we haven't seen any user of that 
code in many years
 (on upstream development lists).

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 72584] Re: Installing Mozilla-opensc package not enough to use smart cards

2010-02-10 Thread Andreas Jellinghaus
If installing the package would reconfigure firefox, people would face
problems.

For example usualy you can run firefox and thunderbird at the same time.
But when you configure smart cards access to these applications, you can't
(unless you disable some security checks - which is insecure).

Thus reconfiguring firefox might be not such a good idea.

-- 
Installing Mozilla-opensc package not enough to use smart cards
https://bugs.launchpad.net/bugs/72584
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 519790] [NEW] udev files not installed

2010-02-10 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: openct

thanks for packaging openct in 0.6.19-1ubuntu1 so fast!

I found a small issue however:
in openct-0.6.19/debian/openct.install
please add these lines:

debian/60-openct.rules lib/udev/rules.d
debian/tmp/lib/udev/*

so that the udev rules file and the scripts
run by udev to notify openct are included too!

** Affects: openct (Ubuntu)
 Importance: Undecided
 Assignee: Stephan Hermann (shermann)
 Status: New

** Changed in: openct (Ubuntu)
 Assignee: (unassigned) = Stephan Hermann (shermann)

-- 
udev files not installed
https://bugs.launchpad.net/bugs/519790
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 503119] Re: fix openct package - migrate from hal to udev

2010-01-10 Thread Andreas Jellinghaus
openct 0.6.19 is now available with updated udev rules for ubuntu.

However the debian maintainer ignored the hal-udev transiation, the debian 
package still contains
the hal files.

An experimental packaging for debian with udev rules instead of hal is 
available here:
http://www.opensc-project.org/debian/

this should make it real easy to package 0.6.19 for ubuntu, but switch to udev 
files instead of the
hal files (which no longer work, since ubuntu doesn't install hal any more).

-- 
fix openct package - migrate from hal to udev
https://bugs.launchpad.net/bugs/503119
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-01-10 Thread Andreas Jellinghaus
SRU is stable release update, i.e. ubuntu plans to fix karmic via
karmic-proposed-updates.

I saw the branch in launchpand and it looks good, but is there a ppa
with packages somewhere?

packages.ubuntu.com doesn't show any opensc package except in the normal
releases.

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-01-10 Thread Andreas Jellinghaus
 ah, there are source and binary packages here:
https://launchpad.net/ubuntu/karmic/+source/opensc/0.11.8-1ubuntu2

Dominik, can you verify those with your cards?

any idea why searching for opensc in any distribution on packages.ubuntu.com
doesn't find those?

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-01-07 Thread Andreas Jellinghaus
with an eraseable starcos card (iKey 3000) I did those tests for forward and 
backward compatibility.
if that token is initialized with opensc = 0.11.5 or the latest opensc with 
the fixes, it still works on
opensc  0.11.5 fine in both cases.

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-01-05 Thread Andreas Jellinghaus
oops, got the version wrong.

please update to opensc 0.11.12, the first version with the fix.

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 503119] [NEW] fix openct package - migrate from hal to udev

2010-01-04 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: openct

ubuntu dropped hal in 9.10/karmic without fixing openct package -
as you can see in the file list it provides information using fdi files
to hal, so it gets called when a matching usb token/smart card reader
was plugged in. without hal that doesn't work.

in 2007 openct switched from udev to hal as suggested by kay sievers
as hal solved many issues we had with udev (see bug hotplug-devel
in july 2007 for example). so if ubuntu dropped hal we need the
openct package in udev to revert to the udev rules files.

Thanks to Scott James Remnant and Martin Pitt for helping on irc 
to figure out the new syntax / rules for udev.  Now we have a new
set of rules for openct:
wget http://www.opensc-project.org/svn/openct/trunk/etc/openct.udev.in
and openct_usb.in and replace those files in the source code etc/
directory with the updated copy.

if you prefer a patch, or want me to release a new version of openct
to help the situation, please let me know.

also I can help with testing new packages, or provide hardware for
testing.

** Affects: openct (Ubuntu)
 Importance: Undecided
 Status: New

-- 
fix openct package - migrate from hal to udev
https://bugs.launchpad.net/bugs/503119
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2010-01-04 Thread Andreas Jellinghaus
no, opensc in debian (0.11.9-2) is too old to contain the fix.
so please update to 0.11.11, or backport the changes (but since
most other changes are important fixes too ...).

if you care about working smart card support, it would be nice
to fix openct too (see my new bug report 503119).

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2009-12-18 Thread Andreas Jellinghaus
This bug was fixed in OpenSC 0.11.12. For details see:
http://www.opensc-project.org/pipermail/opensc-announce/2009-December/30.html

Ubuntu could publish packages of this latest version or backport the changes to 
older versions
(simply diff 0.11.12 against 0.11.11 so you can easily extract the related 
changes).

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 495410] Re: PKCS#11 signing does not work

2009-12-13 Thread Andreas Jellinghaus
the cause is change 3401 between 0.11.4 and 0.11.5. reverting it will
get your cards to work for now.

however we still need to analyse the situation. I guess the change is correct. 
the new code will properly encode information on the cards. however the fixed 
format is incompatible with the old one, thus new code can't handle old cards 
and vice versa. in that case we
need extra code to detect cards initialized with old code, and decode the 
broken format on the old cards so they work again with new code. and a tool 
to convert old cards from broken to correct format.

discussion takes place on opensc-devel mailing list., will update this
entry once we know what exactly is going on and how we can handle it.

-- 
PKCS#11 signing does not work 
https://bugs.launchpad.net/bugs/495410
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 477066] Re: kdm fails to start/restart (but gdm does properly) in kubuntu karmic 64 bits and nvidia driver 185

2009-11-30 Thread Andreas Jellinghaus
same problem here: kubuntu karmic with 2.6.31-15 and nvidia 185 (current 
packages).
going back to 2.6.31-14 kernel solved the problem for me.

I debugged the issue with strace: kdm doesn't crash, nor does the xserver. the 
problem
is that X does open(/dev/nvidia0) and that takes about 15 seconds for some 
reason.
kdm then thinks starting X server takes too long, something must be wrong and 
terminates
the X server (and tries to start a failsafe one).

when you look at the laptop screen (my case: lenovo T61 with nvs 140 quadro 
chip), the
screen goes black when X is started, and it takes maybe 10 seconds till the 
nvidia logo
appears. normaly the nvidia logo appears within a few seconds.

in syslog you can see these messages:
Nov 30 15:32:12 yomigaeri kdm[6476]: X server startup timeout, terminating
Nov 30 15:32:15 yomigaeri kdm[6476]: X server died during startup
Nov 30 15:32:15 yomigaeri kdm[6476]: Failed to start X server. Starting 
failsafe X server.

so you know kdm stopped X server because it took too long to start. in my case 
X was started
15:31:56, and in strace there was a gap from :57 to :10 or so when 
open(/dev/nvidia0) was done.

the kernel/dmesg doesn't have any error message from nvidia driver or
similar.

-- 
kdm fails to start/restart (but gdm does properly) in kubuntu karmic 64 bits 
and nvidia driver 185
https://bugs.launchpad.net/bugs/477066
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 441954] [NEW] https access broken (with optional client certs)

2009-10-04 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: subversion

I tested karmic and the https access to svn servers configured with optional 
client
certificates (so you can for example read without authenticating yourself, but
write access needs authentication with a client certificate) is broken.

steps to reproduce:
svn co http://www.opensc-project.org/svn/test/trunk http
- works
svn co https://www.opensc-project.org/svn/test/trunk https
- works on 8.04, broken on all releases since, including karmic

source of the problem: gnutls doesn't implement SSL properly.
openssl did, so the old 8.04 packages linked against openssl
work fine.

yes, I know, the problem has been reported several times for 8.10 and 9.04,
but nothing ever happened. so I tested again for 9.10/karmic and to get your
attention to this problem, so maybe it will be fixed this time before release,
here is a new bug report. (see 366928 for older bug reports)

** Affects: subversion (Ubuntu)
 Importance: Undecided
 Status: New

-- 
https access broken (with optional client certs)
https://bugs.launchpad.net/bugs/441954
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 435138] Re: no appropriate entry in fdi file

2009-09-25 Thread Andreas Jellinghaus
openct 0.6.18 was released today, so you could upgrade to the
latest version. no changes to the build system should be necessary
other than bumping the version number

-- 
no appropriate entry in fdi file
https://bugs.launchpad.net/bugs/435138
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 435138] Re: no appropriate entry in fdi file

2009-09-23 Thread Andreas Jellinghaus
rutoken S support is currently only in openct trunk, and will
be in openct 0.6.18. ubuntu is still using 0.6.16. 

if those lines are added to the fdi, will rutoken work, or will
it need the code changes we have in openct trunk too?

-- 
no appropriate entry in fdi file
https://bugs.launchpad.net/bugs/435138
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-05-19 Thread Andreas Jellinghaus
Am Dienstag 19 Mai 2009 06:13:13 schrieb David Medberry:
 Hi Andreas,

 Your openct 0.6.16-0 worked flawlessly for me on i386 platform as well.
 Any idea when this will go into Jaunty? Any place else we need to
 request that?
the important wiki pages seem to be
https://wiki.ubuntu.com/StableReleaseUpdates

and
https://wiki.ubuntu.com/PackagingGuide/Recipes/Debdiff

but I'm not sure how that works out - why put my name in the debian/changelog
file when I can't upload patches/fixes/trigger compiling new packages etc.?

also we can only hope to get a fix included for -updates, if we want
to push the new package, we would need to go for -backports.

debian has a new 0.6.16-1 package, but without any of the changes and 
improvements I made, so it still uses udev, maybe works maybe not, has
no documentation included, is compiled with libusb etc. I opened a bug
but got no response so far.

will try to write a debdiff patch for jaunty. but the update policy
will maybe not allow to fix a package only because it is broken and
does not work - the restrictions are quite big :(

Andreas

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-05-19 Thread Andreas Jellinghaus
new debdiff file, please apply / upload fixed package to universe
jaunty-updates.

** Attachment added: debdiff file with the trivial bugfix
   http://launchpadlibrarian.net/26923554/openct_0.6.14-3ubuntu3.debdiff

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-04-29 Thread Andreas Jellinghaus
 /lib/udev/rules.d/40-openct.rules
replace
ENV{MODALIAS}==usb:v0529p0514, RUN+=/lib/udev/openct_usb
with
ENV{MODALIAS}==usb:v0529p0514*, RUN+=/lib/udev/openct_usb

and it should work.

can anyone fix the jaunty openct package with this trivial typo fix?
or will openct users need to wait 6 months for a new ubuntu release?

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-04-29 Thread Andreas Jellinghaus
for reference, the upstream fix was commit 1063 in october 2008.
http://www.opensc-project.org/openct/changeset/1063/trunk/etc/openct.udev.modalias.in

the debian bug is 498920


** Bug watch added: bugs.debian.org/ #498920
   http://bugs.debian.org:80/cgi-bin/bugreport.cgi?bug=498920

** Also affects: openct (Debian) via
   http://bugs.debian.org:80/cgi-bin/bugreport.cgi?bug=498920
   Importance: Unknown
   Status: Unknown

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-04-29 Thread Andreas Jellinghaus
we had problems like this before: the kernel finds out there is a new
usb device. udev gets an event. udev manages both to tell openct
about it and create a file in /dev/ somewhere. but again the communication
is flawed somehow, openct is not told what that new device file is. sad.

lets switch to hal setup, as the udev developers themself tell us to do,
and they don't want programs like openct to use udev directly it seems.
hald setup on the other side is tested and supported, so that seems to
be the better choice.

thanks to a huge amount of work by  Stanislav Brabec from suse, openct
has even much better hal setup now, and I created a pre-release from svn
trunk and packaged it for ubuntu, and it works on my machine. can you
give it a try?

http://www.opensc-project.org/debian/openct/
has the source and diff.gz and amd64 binaries.

if it works I will release openct 0.6.16 soon and hope that both debian and
ubuntu can pick it up to close bugs (or backport the fixes if they prefer that).

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 368683] Re: Openct needs to be restarted when inserting an eToken

2009-04-28 Thread Andreas Jellinghaus
can you check which configuration the ubuntu package has?
a hal file (official suggestion), an udev rule or a hotplug map file?

if so, what is the usb vendor and product id, and are those matched
in that file? what script is configured to be triggered by that file?

can you check if that script is run? (e.g. insert a line
touch /tmp/openct-script-is-run and see if it created
that file).

if that script is run, can you try inserting these commands:
exec 2 /tmp/openct-script.log 21
set -x

re-insert the token and if that log file is created,
copy it aside and attach it later to this bug.

if that script seems to work (no errors etc.)
check if openct-control/ifdhandler is started by
the script. you can simply increase debug level
in openct.conf to 5 or 6 or so, and make sure
syslog logs them (usualy does, see /var/log/messages
or something like that), and check if openct is started
(e.g. messages from openct-control or ifdhandler).

maybe any of these actions can show us what is wrong
and how we can fix it.

and if anyone here knows what the magic key is to turn a
patch fixing a real-world problem, into an updated package
in both debian, the next ubuntu _AND_ jaunty-updates, please
let us know so we can try. I failed much too often:(

-- 
Openct needs to be restarted when inserting an eToken
https://bugs.launchpad.net/bugs/368683
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 366928] [NEW] subversion still linked with gnutls

2009-04-25 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: subversion

many web servers use https with optional client certificates.
this works fine with subversion: everyone can checkout an open source
project without having to show a client certificate. but if you try to
access a restricted resource (e.g. any modification/write request),
the server asks the client for client certificate. the https stream needs
to renegotiate to show that client cert.

subversion can do that fine, if it is linked with openssl.
it can't do that properly if linked with gnutls. subversion up to 8.04 worked
fine, all subversion packages in 8.10 and 9.04 are broken - even though
the bug for 8.10 was reported shortly after 8.10 release (or even earlier?).

please fix subversion by downgrading to the 8.04 subversion packages 
or simply link with openssl. keeping gnutls while it is not fixed, is a huge
regression.

you can easily reproduce the problem with:
LANG=en_EN svn ls  https://www.opensc-project.org/svn/opensc/trunk
svn: warning: cannot set LC_CTYPE locale
svn: warning: environment variable LANG is en_EN
svn: warning: please check that your locale name is correct
svn: OPTIONS of 'https://www.opensc-project.org/svn/opensc/trunk': Could not 
read status line: SSL error: Rehandshake was requested by the peer. 
(https://www.opensc-project.org)

if necessary I can give you the whole apache conf if needed.

** Affects: subversion (Ubuntu)
 Importance: Undecided
 Status: New

-- 
subversion still linked with gnutls
https://bugs.launchpad.net/bugs/366928
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 324775] [NEW] please drop this package

2009-02-03 Thread Andreas Jellinghaus
Public bug reported:

ubuntu still includes a software called etoken.
that software is buggy, does not work properly (or at all?) and
trying to use it can damage your hardware.

so please be so kind and remove it?

I'm the author of it, and I replaced it with some new open source project
about 7 years ago, and even that one got replaced many years ago
with another open source project: openct. part of ubuntu for ages and
working well.

For reference: in ubuntu the source is called etoken, the binary
is called libetoken, and the upstream web page is
http://etoken.sourceforge.net/

I contacted debian as well, and still hope they will remove the package
before lenny is final. the debian maintainer wrote back to me:
I've asked ftp masters to remove the package and have opened a bug to the
package (RC) so that it gets removed by release managers from the release.

so please get this broken, untested, not working, hardware damaging software
out of ubuntu before jaunty is released.

Thanks, Andreas

** Affects: etoken (Ubuntu)
 Importance: Undecided
 Assignee: Ubuntu Release Team (ubuntu-release)
 Status: New

** Changed in: etoken (Ubuntu)
 Assignee: (unassigned) = Ubuntu Release Team (ubuntu-release)

-- 
please drop this package
https://bugs.launchpad.net/bugs/324775
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 294648] Re: svn over https with client certificates broken (regression in intrepid)

2008-12-28 Thread Andreas Jellinghaus
Downgrading my intrepid subversion and libsvn1 packages to the hardy-packports 
situation solved the problem for me as well.
please fix the subversion packages in intrepid.

my setup: hardy server, apache2 with subversion, with optional client 
certificates, but for the write operations they are required.
this did not work with the intrepid subversion client (which works well, if the 
client certificates are required, but not if they are optoinal, and 
apache+subversion client need to re-negotiate the ssl session). this setup 
worked for a long time with apache and subversion, and was now broken after 
several years with the new subversion in intrepid.

-- 
svn over https with client certificates broken (regression in intrepid)
https://bugs.launchpad.net/bugs/294648
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 294648] Re: svn over https with client certificates broken (regression in intrepid)

2008-12-28 Thread Andreas Jellinghaus
Downgrading my intrepid subversion and libsvn1 packages to the hardy-packports 
situation solved the problem for me as well.
please fix the subversion packages in intrepid.

my setup: hardy server, apache2 with subversion, with optional client 
certificates, but for the write operations they are required.
this did not work with the intrepid subversion client (which works well, if the 
client certificates are required, but not if they are optoinal, and 
apache+subversion client need to re-negotiate the ssl session). this setup 
worked for a long time with apache and subversion, and was now broken after 
several years with the new subversion in intrepid.

-- 
svn over https with client certificates broken (regression in intrepid)
https://bugs.launchpad.net/bugs/294648
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 294648] Re: svn over https with client certificates broken (regression in intrepid)

2008-12-28 Thread Andreas Jellinghaus
Downgrading my intrepid subversion and libsvn1 packages to the hardy-packports 
situation solved the problem for me as well.
please fix the subversion packages in intrepid.

my setup: hardy server, apache2 with subversion, with optional client 
certificates, but for the write operations they are required.
this did not work with the intrepid subversion client (which works well, if the 
client certificates are required, but not if they are optoinal, and 
apache+subversion client need to re-negotiate the ssl session). this setup 
worked for a long time with apache and subversion, and was now broken after 
several years with the new subversion in intrepid.

-- 
svn over https with client certificates broken (regression in intrepid)
https://bugs.launchpad.net/bugs/294648
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 263887] Re: nvidia switch output

2008-11-09 Thread Andreas Jellinghaus
sorry, I cannot test some daily image or whatever.

But I updated to 8.10 and now closing and re-opening the display
switches the video output from external to internal and back. the
resolution is not adjusted, but that is easy to work around.

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-25 Thread Andreas Jellinghaus
 ls -l /var/lib/apt/periodic/
insgesamt 0
-rw-r--r-- 1 root root 0 2008-10-24 08:02 update-stamp
-rw-r--r-- 1 root root 0 2008-10-24 15:46 update-success-stamp

ls -l /etc/cron.daily/apt
-rw-r--r-- 1 root root 7680 2008-08-14 18:56 /etc/cron.daily/apt


** Attachment added: /var/log/apt/term.log
   http://launchpadlibrarian.net/18880630/term.log

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] [NEW] update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: update-manager

updateing hardy (kubuntu-desktop plus other packages from all 4 repo branches) 
to intrepid on x86_64.
started with kdesu adept_manager --dist-upgrade-devel as suggested. at some 
point the update procedure
failed to install the new update-manager package: because dpkg failed - the 
dpkg database was already locked.

attaching all logs as suggested by riddel on irc.

** Affects: update-manager (Ubuntu)
 Importance: Undecided
 Status: New

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus

** Attachment added: /var/log/dist-upgrade/apt.log
   http://launchpadlibrarian.net/18862793/apt.log

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus
apt-term.log is empty

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus
oops, konqueror told me it was empty. that was wrong, it was permission denied.
here is the file.

** Attachment added: /var/log/dist-upgrade/apt-term.log
   http://launchpadlibrarian.net/18862857/apt-term.log

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus

** Attachment added: /var/log/dist-upgrade/main.log
   http://launchpadlibrarian.net/18862870/main.log

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus

** Attachment added: /var/log/dist-upgrade/term.log
   http://launchpadlibrarian.net/18862873/term.log

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 288746] Re: update hoary to intrepid RC failed with dpkg locked

2008-10-24 Thread Andreas Jellinghaus
sorry, all log files in german.

now I can't run kdesu adept-manager ... etc. again - no such file or
directory.

also kdesu is no longer installed either.

-- 
update hoary to intrepid RC failed with dpkg locked
https://bugs.launchpad.net/bugs/288746
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 209403] Re: crash with gmane nntp server and kvm.devel newsgroup

2008-09-24 Thread Andreas Jellinghaus
my kontact is german, so I try to translate  back to english:

start kontact
click usenet
click zugang (maybe acces? between go to and groups, 5th menu item from 
left
click settings
name: gmane
server: news.gmane,org
port: 119
click ok
in the tree click on gmane, right-click
select subsribe news groups
click new list button
search for kvm
select gmane.comp.emulators.kvm.devel
click ok
click 5th button get new articles for all groups
click gmane.comp.emulators.kvm.devel
and now I can't figure out how to see articles as old as 6 months -
by default knode only accesses the last 1000 articles. or is gmane
only offering those via nntp? no idea.

doing nothing on a security related bug for 6 months is not exactly great.
I wonder if reporting bugs to ubuntu is worth the work, if the result is 
nothing.

-- 
crash with gmane nntp server and kvm.devel newsgroup
https://bugs.launchpad.net/bugs/209403
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kdepim in ubuntu.

-- 
kubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs


[Bug 263887] [NEW] nvidia switch output

2008-09-02 Thread Andreas Jellinghaus
Public bug reported:

Lenovo T61 laptops with Nvidia Quadro 140 NVS Laptops and (k)ubuntu 8.04:
FN+F7 for switching video output (dvi - lcd) does not work. annoying for 
people like me who use a docing station 50% of the time.

the old work around:
start nvidia-settings, click on displays, click detect displays, click the 
disabled
display, click configure, click on twinview, click ok, click on the old enabled
display, click configure, click on disable, click ok, click disable, click 
apply,
wait for the video output to switch, click appy, click quit, click quit.

well, that is too many clicks. I wrote a tiny C program to switch video output
using the nvidia control api. can you add this somewhere to ubuntu? maybe
to the nvidia driver? (or some extra package?)

bonus if you can configure fn+f7 to run this program :)

** Affects: ubuntu
 Importance: Undecided
 Status: New

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 263887] Re: nvidia switch output

2008-09-02 Thread Andreas Jellinghaus

** Attachment added: makefile
   http://launchpadlibrarian.net/17229676/Makefile

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 263887] Re: nvidia switch output

2008-09-02 Thread Andreas Jellinghaus

** Attachment added: source code
   http://launchpadlibrarian.net/17229686/switch-display.c

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 263887] Re: nvidia switch output

2008-09-02 Thread Andreas Jellinghaus
the ACPI key for the video button is:
ibm/hotkey HKEY 0080 1007

so if you install this application as /root/bin/switch-display, you need to edit
/etc/acpi/events/ibm-videobtn and set action=/root/bin/switch-display

restart acpid using /etc/init.d/acpid restart (or reboot) and you should have 
a working
way to switch video output.

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 263887] Re: nvidia switch output

2008-09-02 Thread Andreas Jellinghaus
this switches the video output, but doesn't change resolution, frequencies etc. 
so far.
need to figure out how nvidia-settings does that (and how auto resolution 
works there).
converted the tool to a patch and send it to the nvidia-settings developers and 
asked
for help there.

also DISPLAY and XAUTHORITY needs to be set so acpid can start some process 
accessing
X. e.g. XAUTHORITY=`ls /var/run/xauth/*` DISPLAY=:0 /root/bin/switch-video 
might work.

-- 
nvidia switch output
https://bugs.launchpad.net/bugs/263887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 256055] Re: spr/pinpad 532 is not recognized

2008-08-09 Thread Andreas Jellinghaus
hmm, openct source in etc/ has both 04e6:0003 and 04e6:e003, not consistent, 
not sure
which one is correct. maybe it depends on the firmware you have installed on 
the reader?
(without a firmware update it might be buggy anyway - older firmware has issues 
with pinpad)

I fixed openct trunk source to list both ID's, that way we should be safe 
(changeset 1073).
please apply to ubuntu and debian.

btw: it might be better to use hal instead of udev or hotplug based mechanism -
at least the usb/udev/hal crew tells me it is best to migrate to hal and 
distributions
like suse already did.

-- 
spr/pinpad 532 is not recognized
https://bugs.launchpad.net/bugs/256055
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 246392] Re: openct doesn't recognize etoken

2008-07-10 Thread Andreas Jellinghaus
I confirm this problem, a simple typo in etc/openct.udev.modalis.in.
please fix it in a new revision of the openct package.

** Changed in: openct (Ubuntu)
   Status: New = Confirmed

-- 
openct doesn't recognize etoken
https://bugs.launchpad.net/bugs/246392
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 246392] Re: openct doesn't recognize etoken

2008-07-10 Thread Andreas Jellinghaus
thanks for finding the problem.
this is an upstream problem, it was fixed in svn revision 1063 in trunk.

not sure when anyone finds time to create a new openct upstream release,
so could someone please fix this trivial issue in ubuntu packages directly?

Thanks, Andreas

-- 
openct doesn't recognize etoken
https://bugs.launchpad.net/bugs/246392
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 246392] Re: openct doesn't recognize etoken

2008-07-08 Thread Andreas Jellinghaus
Hi, to debug this roblem, please show:
 - the version of your linux kernel. some older 2.6.22 or so were buggy.
 - lsusb - what vendor id and product id does the etoken use
 - setup - no idea what ubuntu currently uses? and packages.ubuntu.com isn't 
working for me.
   does openct come with udev rules file or an fdi file for hal?
 - is that vendor id and product id listed in the udev rules / hal fdi file?
 - if the problem is udev related, udevmonitor (--env and --kernel --env) 
output while a token is plugged in might help.
 - the script executed by udev or hal: can you edit it and put something like 
this in it:
 exec  /root/openct-debug.log 21 
 echo
 date
 echo $0: $*
 export
 set +x

then have a look what is in /root/openct-debug.log.
if device names like /dev/bus/usb/003/004 or similar show up,
please add an appropriate ls -l $DEVNAME (or what the relevant variable is) 
to the script.
maybe the file gets only created after openct tries to use it or a similar race 
condition.

oh, I forgot to mention: increasing debug level in openct.conf and looking in 
syslog for ifdhandler
syslog messages is also a good idea.

sorry, I haven't debugged openct in a while and lost the track of the latest 
status. the bug you mentioned
looks like it was finally working.

I'm currently quite busy, won't have much time for this, but still I will try 
to help to track down the issue
and fix it.

Regards, Andreas

-- 
openct doesn't recognize etoken
https://bugs.launchpad.net/bugs/246392
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 221856] Re: package openct 0.6.14-2 failed to install/upgrade: sous-processus post-installation script tu? par le signal (Interrompre)

2008-04-25 Thread Andreas Jellinghaus
could you edit /var/lib/dpkg/info/openct.postinst and add a set -x as second 
line,
and then run LANG=C dpkg --configure --pending? (run both as root). that way
we would get detailed information what is going wrong, with error messages in
english (sorry, I don't speak french, but from what I can see the openct 
postinst
script fails for some reason - not sure where exactly, thats why I need it to 
be run
with set -x once more). Thanks!

-- 
package openct 0.6.14-2 failed to install/upgrade: sous-processus 
post-installation script tu? par le signal (Interrompre)
https://bugs.launchpad.net/bugs/221856
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 68274] Re: please start ssh for single user mode

2008-03-07 Thread Andreas Jellinghaus
I don't see how your reply has anything to do with the bug report.

Servers reachable via network only have a huge problem, if they are booted into 
single user mode.
Without any console or noone near a console such a server is dead and the only 
way to fix the problem
would be a hard power cycle. but there is an easy fix: start ssh daemon.

strength of root passwords, sudo and all that are not part of the problem. my 
personal preference is using ssh
rsa keys with smart cards only, yours might be different. the with nologin 
file is a suggestion from my side,
su that the result is a single user mode - only root can login. if you want a 
different security policy, that is
possible, but outside the scope of this bug report.

the runlevel assignment seems to be hard coded (postinst always runs 
update-rc.d with fixed parameters), so
this is not configureable and the default bites a number of uses with a valid 
use case. thus I suggest a change.

Regards, Andreas

-- 
please start ssh for single user mode
https://bugs.launchpad.net/bugs/68274
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] Re: kernel 2.6.22 broke uevent with MODALIAS

2007-12-28 Thread Andreas Jellinghaus
Hi Henrik,

as far as I know ubuntu already updated its 2.6.22 kernel to inclide the fix,
and since hardy uses a kernel later that 2.6.22.6 / 23+ it doesn't have this
issue (unless someone broke the upstream kernel).

Regards, Andreas

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 154271] Re: xenU sending too big packets on ubuntu 7.10 gutsy

2007-10-19 Thread Andreas Jellinghaus
ethtool -K eth0 tx off
in xenU fixes the problem.

-- 
xenU sending too big packets on ubuntu 7.10 gutsy
https://bugs.launchpad.net/bugs/154271
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 154271] xenU sending too big packets on ubuntu 7.10 gutsy

2007-10-19 Thread Andreas Jellinghaus
Public bug reported:

etup: amd64, xen0 = ubuntu 7.10 (gutsy), xenU = ubuntu 7.10 (gutsy),
network config with xenU routing via xen0.

scp xenU:file . very slow, ~50KB/s
scp xen0:file . several MB/s

on xen0:
scp xenU:file . many MB/s

had a look at tcpdump, I see lines like this:
10:55:30.319389 IP (tos 0x8, ttl 64, id 59286, offset 0, flags [DF], proto TCP 
(6), length 2948) xenU.22  desktop: . 47785:50681(2896) ack 0 win 404 
nop,nop,timestamp 20681576 687514747
10:55:30.319399 IP (tos 0xc8, ttl 64, id 52994, offset 0, flags [none], proto 
ICMP (1), length 576) xen0  xenU: ICMP desktop unreachable - need to frag 
(mtu 1500), length 556 IP (tos 0x8, ttl 64, id 59286, offset 0, flags [DF], 
proto TCP (6), length 2948) xenU.22  desktop.41056: . 47785:50681(2896) ack 
0 win 404 nop,nop,timestamp 20681576 687514747[|icmp]

so the xenU is sending packets with size 2948? why?
ifconfig on xenU:

eth0  Link encap:Ethernet  HWaddr 00:16:3E:6D:03:2D  
  inet addr:xenU  Bcast:...  Mask:255.255.255.255
  inet6 addr: fe80::216:3eff:fe6d:32d/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:34918213 errors:0 dropped:0 overruns:0 frame:0
  TX packets:34262839 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000 
  RX bytes:12337072144 (11.4 GB)  TX bytes:48486812526 (45.1 GB)

so the MTU is 1500 which is fine. xenU sending too big packets.

** Affects: xen-3.1 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
xenU sending too big packets on ubuntu 7.10 gutsy
https://bugs.launchpad.net/bugs/154271
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 153313] alternative installer in 7.10 rc fails to remove raids : /dev/md/1 no such file or directory

2007-10-16 Thread Andreas Jellinghaus
Public bug reported:

reproduce:
 - boot installer
 - zero disks with dd if=/dev/zero of=/dev/sda bs=512 count=1 etc. for all 
disks
 - reboot
 - boot installer
 - setup two partitions on two disks, create md1 from the first and md2 from 
the second each time.
 - try to setup crypt on the second, while doing that reboot (don't finish the 
erase, but all metadata
   has been written to disk already).
 - boot installer
 - partition with manual
 - select raid config
 - try to remove md0 or md1 - doesn't work

vc4 shows: /dev/md/1 - no such file or directory (~ / from memory).
that is of course wrong, the path should be /dev/md1 without that extra slash.

** Affects: ubuntu
 Importance: Undecided
 Status: New

-- 
alternative installer in 7.10 rc fails to remove raids : /dev/md/1 no such file 
or directory
https://bugs.launchpad.net/bugs/153313
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 153313] Re: alternative installer in 7.10 rc fails to remove raids : /dev/md/1 no such file or directory

2007-10-16 Thread Andreas Jellinghaus
as quick fix I tried this:
cd /dev/md
ln -s ../md1 1
ln -s ../md0 0

and then mdcfg worked fine.

-- 
alternative installer in 7.10 rc fails to remove raids : /dev/md/1 no such file 
or directory
https://bugs.launchpad.net/bugs/153313
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 125054] Re: openct broken by ubuntu udev setup

2007-10-15 Thread Andreas Jellinghaus
thanks a lot scott, I tested the new package and it works fine.

Regards, Andreas

-- 
openct broken by ubuntu udev setup
https://bugs.launchpad.net/bugs/125054
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125054] Re: openct broken by ubuntu udev setup

2007-10-12 Thread Andreas Jellinghaus
my self-build packages with this patch applied (and nothing else) work fine.
if you want to do more testing, I can help (without some usb smart card reader
or usb crypto token supported by openct there is not much you can test 
yourself).

-- 
openct broken by ubuntu udev setup
https://bugs.launchpad.net/bugs/125054
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125054] Re: openct broken by ubuntu udev setup

2007-10-11 Thread Andreas Jellinghaus
I could finally test ubuntu gutsy and found out: it is broken,
hotplugging usb smart card reader does not work.

the problem is simple: /dev/bus/usb/* has device files in ubuntu gutsy,
but /proc/bus/usb is an empty directory. the kernel event gives us a file
name in /proc/bus/usb :(

the proper fix is to ask udev which device file did you create for the parent 
event
and then use that file name. this was implemented in openct 0.6.14 and works 
fine
and has been tested by a several people on several distribution.

so beside a changelog entry I replaced etc/openct_usb.in with the openct 0.6.14 
file
and now it works fine. attached is a diff. could someone please compile/upload 
a new
openct package with this fix?

** Attachment added: fix ubuntu gutsy package for openct
   http://launchpadlibrarian.net/9945926/ubuntu-gutsy-fix.diff

-- 
openct broken by ubuntu udev setup
https://bugs.launchpad.net/bugs/125054
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125054] Re: openct broken by ubuntu udev setup

2007-10-11 Thread Andreas Jellinghaus
this latest patch works on top of the current openct version in universe.
it is as small as it can get.
with it: plug in a usb smart card reader, works.
without it: plug in a usb smart card reader, does not work. you can work around 
with sudo /etc/init.d/openct restart but that
is very ugly, and not a good idea, if you want to login with smart cards (e.g. 
pam_p11 login module with opensc and openct).

the only file changed is the /lib/udev/openct_usb file used by the hotplug 
mechanism, only called for usb smart card readers,
so other packages cannot be affected by this fix.

the fix was necessary, because ubuntu dropped /proc/bus/usb which is
historically mounted with usbfs.

diffstat:
 debian/changelog  |   11 +++
 etc/openct_usb.in |   53 ++---
 2 files changed, 45 insertions(+), 19 deletions(-)

the changed package builds, installs and upgrades fine, does not break
packages depending on it (such as opensc).

-- 
openct broken by ubuntu udev setup
https://bugs.launchpad.net/bugs/125054
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 50299] Re: [sru required] openct sometimes fails

2007-09-30 Thread Andreas Jellinghaus
it is sad that noone can apply th egiven and working patch for dapper,
but that doesn't invalidate the bug.

** Changed in: openct (Ubuntu)
   Status: Invalid = Confirmed

-- 
[sru required] openct sometimes fails
https://bugs.launchpad.net/bugs/50299
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 63929] Re: hotplug mode is not working

2007-09-05 Thread Andreas Jellinghaus
debian unstable has openct 0.6.14, if you can somehow get that into ubuntu, we 
solve
all bugs I'm aware of and it simply works - except that kernel needs to have 
the message.c fix,
but it was in 2.6.22.6 so I hope the kernel team included it in the ubuntu 
2.6.22 already.

I don't know what versions of ubuntu have a working openct - at least
feisty and I think has issues because of the bind mount /dev/bus/usb to
/proc/bus/usb. that was removed in gutsy so at least that is fine. I
think it is best to make sure __NOW__ that gutsy will have a working
openct package. if bugs are found after release and then not handled for
a year, that helps noone.

-- 
hotplug mode is not working
https://bugs.launchpad.net/bugs/63929
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] Re: kernel 2.6.22 broke uevent with MODALIAS

2007-08-31 Thread Andreas Jellinghaus
2.6.22.6 was released today with the fix in drivers/usb/core/message.c
please update the kernel to include the fix if not done already. thanks!

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125054] Re: openct broken by ubuntu udev setup

2007-08-31 Thread Andreas Jellinghaus
please update openct to 0.6.14 for gutsy, so it will work.
0.6.14 contains all recent fixes for udev and hal setup.

note: if you run 2.6.22, make sure it is 2.6.22.6+ (fix for
drivers/usb/core/message.c included) before testing.
a kernel bug for this has been filed as well.

-- 
openct broken by ubuntu udev setup
https://bugs.launchpad.net/bugs/125054
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] kernel 2.6.22 broke uevent with MODALIAS

2007-08-21 Thread Andreas Jellinghaus
Public bug reported:

to reproduce this bug: as root run
udevmonitor --kernel --environment
and then plugin some usb device.

with kernels before 2.6.22 you see some event that has both DEVICE and MODALIAS 
set.
with kernel 2.6.22 there is no such event anymore, only one with DEVICE but 
without MODALIAS
and one with MODALIAS but without DEVICE. This breaks user space applications 
such as openct,
that depend on the uevent mechanism for hotplug support.

I believe the kernel change causing this is here:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=9f8b17e643fe6aa505629658445849397bda4e4f

I reported the bug here: http://lkml.org/lkml/2007/8/17/140
and got feedback with a patch here: http://lkml.org/lkml/2007/8/17/193

the patch fixes the problem mostly. I would also need PRODUCT support so that 
openct would
continue to work unchanged, but I can extract the same information from 
MODALIAS.
So with an updated openct package I could deal with this.

Note: without above patch openct has no way to deal with the new situation (or 
only quite complex solutions like remembering old
events and correlating them, or easier but sad: write a daemon that monitors 
usb all the time ourself). But with this patch
we can rely on kernel watching usb for us, keeping us informed on new devices, 
and with both MODALIAS and DEVICE we can both
match the devices openct supports and know which device file to open and use.

Would be great to fix this before gutsy is released. thanks!

** Affects: Ubuntu
 Importance: Undecided
 Status: New

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] Re: kernel 2.6.22 broke uevent with MODALIAS

2007-08-21 Thread Andreas Jellinghaus
tried to file this against linux-image-2.6.22-1-generic (or -i386), but
launchpad wouldn't allow that.

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] Re: kernel 2.6.22 broke uevent with MODALIAS

2007-08-21 Thread Andreas Jellinghaus
kay sievers posted a new patch fixing this problem:
http://lkml.org/lkml/2007/8/21/147

need to verify this, but guess then also older versions of openct
will still work with such a patched kernel. so please apply.

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 133794] Re: kernel 2.6.22 broke uevent with MODALIAS

2007-08-21 Thread Andreas Jellinghaus
confirmed: openct 0.6.11-1 (feisty) package works with linux kernel 2.6.22,
but only if patched with the second patch from kay sievers. please apply to
gutsy linux kernel package.

-- 
kernel 2.6.22 broke uevent with MODALIAS
https://bugs.launchpad.net/bugs/133794
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125052] Re: document side effects of ubuntu udev setup

2007-07-11 Thread Andreas Jellinghaus
then maybe udev processes several events serialized?

what I'm seeing is one event with DEVICE=/proc/bus/usb/NNN/NNN and no matter 
how long I sleep / delay / retry to find the file, it always shows up after the 
script terminates. if the script internally forks into the background the 
device file is there a few ms later.this is a huge problem that costs me hours 
to debug and it might eat
other people as well. so please at least document the problem. an no. I'm not 
using PROGRAM but RUN+=, thanks for asking. please fix the status to valid 
again.

** Changed in: udev (Ubuntu)
   Status: Invalid = New

-- 
document side effects of ubuntu udev setup
https://bugs.launchpad.net/bugs/125052
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125052] Re: document side effects of ubuntu udev setup

2007-07-11 Thread Andreas Jellinghaus
only one event emited by the kernel is useable, and that is the one with both 
DEVICE and MODALIAS set.
if /proc/bus/usb would be usbfs, then this would work, and it does so on all 
other linux distributions.
but because ubuntu is not using usbfs on the standard location the expected 
device is neither there nor
does it show up, no matter how long you wait (except if you fork into the 
background for doing that).

all I'm asking for: document it. README.ubuntu and thats it. Is this too much 
asked for?
I'm not the only one who spend hours and hours till I found the source of this. 
documenting
the issue would save other people valuable time.

** Changed in: udev (Ubuntu)
   Status: Won't Fix = New

-- 
document side effects of ubuntu udev setup
https://bugs.launchpad.net/bugs/125052
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 125052] document side effects of ubuntu udev setup

2007-07-10 Thread Andreas Jellinghaus
Public bug reported:

Binary package hint: udev

normal linux is like this:
usb device is pugged in. kernel detects it, creates /proc/bus/usb/NNN/NNN, 
sends event. udev gets event, looks at rules, starts app. app opens 
/proc/bus/usb/NNN/NNN and works with it. user experience: good.

ubuntu not only implemented udev for /dev/bus/usb with ACLs, it also
moved the normal kernel usbfs from /proc/bus/usb to /proc/bus/usb/.usbfs
and bind-mounts /proc/bus/usb to /dev/bus/usb. now what happends here is
that when udev starts the app it has not yet created
/dev/bus/usb/NNN/NNN, instead it waits till app terminates before doing
that. this is new, and breaks existing applications that otherwise
worked with with kernel+udev+usbfs in /proc/bus/usb. at least udev
should make this very hard to find problem public by documenting it.
openct is an example of an application that broke with this change.

also /etc/init.d/udev stop; sleep 5: /etc/init.d/udev start will create
an unexpected situation: /proc/bus/usb is no longer bind-mounted to
/dev/bus/usb and thus any new device plugged in will show up under
/dev/bus/usb/NNN/NNN and /proc/bus/usb/.usbfs/NNN/NNN but not under
/proc/bus/usb/NNN/NNN. this is not expected and should be fixed or
documented as well.

this was tested with ubuntu feisty / 7.04, but I believe that gutsy is affected 
as well, and maybe earlier ubuntu versions as well.
In addition to this bug I will file a bug against openct - it needs an updated 
/lib/udev/openct_usb file that forks itself into the background where it can 
wait till udev created /proc/bus/usb/NNN/NNN on ubuntu and then start using it

** Affects: udev (Ubuntu)
 Importance: Undecided
 Status: New

-- 
document side effects of ubuntu udev setup
https://bugs.launchpad.net/bugs/125052
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


  1   2   >