[Bug 1970717] [NEW] Oidentd fails to work when started by systemd .socket listener

2022-04-28 Thread Sander Smeenk
Public bug reported:

At least in Ubuntu 22.04, possibly earlier, oidentd is started by
systemd acting as an inetd. This no longer works in 22.04 because of
options set in the `.service` file and fed to oidentd at startup.

This looks to be a mix of the systemd `Standard[In|Out]put=..` settings
and startup options for oidentd. Oidentd (in the default `-I` mode)
expects to have the client on stdin/stdout. Systemd foils that by
redirecting StandardOutput to journal or syslog.

I changed my `/lib/systemd/system/oidentd@.service` to have:

  StandardInput=socket
  StandardOutput=socket

And i have removed the `-S` option to oidentd from the `ExecStart` line.

It now works fine for me. Logs end up in syslog and most important,
ident works again.

** Affects: oidentd (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1970717

Title:
  Oidentd fails to work when started by systemd .socket listener

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/oidentd/+bug/1970717/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1744988] Re: time drifting on linux-hwe kernels

2018-01-24 Thread Sander Smeenk
Wow!! I've been searching for this problem for quite some time!!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1744988

Title:
  time drifting on linux-hwe kernels

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-hwe/+bug/1744988/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1476679] Re: opme and/or ojoin modules missing

2015-07-22 Thread Sander Smeenk
Aparently since package version 8.2.7+dfsg.1-1 (available in wily) this
ojoin/opme extra module has been re-added to the package.

A quick loop over the files on my mirror shows (i386 and amd64 are
identical in this aspect):

ircd-hybrid_7.2.2.dfsg.2-6.3_amd64.deb yes
ircd-hybrid_7.2.2.dfsg.2-6ubuntu3_amd64.deb yes
ircd-hybrid_8.1.13.dfsg.1-1_amd64.deb no
ircd-hybrid_8.1.17.dfsg.1-1_amd64.deb no
ircd-hybrid_8.2.0+dfsg.1-2_amd64.deb no
ircd-hybrid_8.2.7+dfsg.1-1_amd64.deb yes

For those not willing to upgrade to wily, the following will probably
build proper packages for the most recent version of ircd-hybrid from
the GIT repo, including SSL support, but you can leave that out
ofcourse...

$ sudo apt-get install build-essential # or start your build chroot like
pbuilder

$ sudo apt-get install git libssl-dev ; sudo apt-get build-dep ircd-hybrid
$ git clone git://anonscm.debian.org/users/dom/ircd-hybrid.git
$ cd ircd-hybrid
$ USE_OPENSSL=1 fakeroot debian/rules binary

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1476679

Title:
  opme and/or ojoin modules missing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ircd-hybrid/+bug/1476679/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1476679] [NEW] opme and/or ojoin modules missing

2015-07-21 Thread Sander Smeenk
Public bug reported:

The m_opme.so (and/or m_ojoin.so) loadable module seems to be missing
from the Ubuntu Trust 14.04 ircd-hybrid package, versioned
1:8.1.13.dfsg.1-1. While this server was running lucid, the 'm_opme.so'
module was available and allowed OPERs to op (+o) themselves in channels
that were opless and/or to use OJOIN @#channel to join as op regardless
of other ops online.

README.Debian states some information about 'opme' and 'ojoin' modules, but 
both are not available.
It talks about an experimental patch in debian/patches called 
99_opme_allow_operators, but this is not there either.

The ojoin and opme source code is available in upstream tarballs and in
GIT git://anonscm.debian.org/users/dom/ircd-hybrid.git

** Affects: ircd-hybrid (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1476679

Title:
  opme and/or ojoin modules missing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ircd-hybrid/+bug/1476679/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1466581] [NEW] Unable to unmount 'hung NFS mount' (server gone) with FORCE and/or LAZY

2015-06-18 Thread Sander Smeenk
Public bug reported:

Ubuntu Trusty, util-linux 2.20.1-5.1ubuntu20.3

I can't 'umount -f /mnt/storage' an NFS-filesystem whose remote end has
gone missing. The process just stalls in an uninterruptable state.
Strace shows umount at some point tries to readlink() the mount point
which stalls because that mount point is broken. Which is why i want to
force umount it. ;)

I then proceeded to remove 99% of umount.c's code so it would just call
umount2() on the target with the FORCE flag, recompiled the binary and
it 'neatly' unmounted the filesystem.

I think umount.c tries too many sanity checks with -f enabled.
It should perhaps ask if the user is really sure, and then just call umount on 
the target and fix mtab etc...

** Affects: util-linux (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1466581

Title:
  Unable to unmount 'hung NFS mount' (server gone) with FORCE and/or
  LAZY

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1466581/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1177684] Re: php5-gd doesn't close /proc/NN/auxv - leaks FDs?

2013-06-11 Thread Sander Smeenk
Can't find an option to close this bug. Feel free to close this. Will
track libjpeg-turbo bug 1189939 instead.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1177684

Title:
  php5-gd doesn't close /proc/NN/auxv - leaks FDs?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1177684/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1177684] Re: php5-gd doesn't close /proc/NN/auxv - leaks FDs?

2013-06-11 Thread Sander Smeenk
Confirmed. The above mentioned bug (+ fix) fixes this issue.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in Ubuntu.
https://bugs.launchpad.net/bugs/1177684

Title:
  php5-gd doesn't close /proc/NN/auxv - leaks FDs?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1177684/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1177684] Re: php5-gd doesn't close /proc/NN/auxv - leaks FDs?

2013-06-11 Thread Sander Smeenk
Confirmed. The above mentioned bug (+ fix) fixes this issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1177684

Title:
  php5-gd doesn't close /proc/NN/auxv - leaks FDs?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1177684/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1177684] Re: php5-gd doesn't close /proc/NN/auxv - leaks FDs?

2013-06-11 Thread Sander Smeenk
Can't find an option to close this bug. Feel free to close this. Will
track libjpeg-turbo bug 1189939 instead.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1177684

Title:
  php5-gd doesn't close /proc/NN/auxv - leaks FDs?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1177684/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1189939] Re: Initialization leaks file descriptors to /prox/self/auxv

2013-06-11 Thread Sander Smeenk
Confirmed. https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1177684
is affected by this.

** Changed in: libjpeg-turbo (Ubuntu)
   Status: New = Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1189939

Title:
  Initialization leaks file descriptors to /prox/self/auxv

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libjpeg-turbo/+bug/1189939/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1013883] Re: www::mechanize doesn't connect to some XHTML 1.1 sites using ssl

2013-03-25 Thread Sander Smeenk
Not sure if this is the same thing, but the problem seems to still exist
in certain situations:

# GET https://www.bit.nl/
Can't connect to www.bit.nl:443
LWP::Protocol::https::Socket: SSL connect attempt failed with unknown error 
error::lib(0):func(0):reason(0) at 
/usr/share/perl5/LWP/Protocol/http.pm line 51.

Downgrading libio-socket-ssl-perl fixes the issue.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1013883

Title:
  www::mechanize doesn't connect to some XHTML 1.1 sites using ssl

To manage notifications about this bug go to:
https://bugs.launchpad.net/libio-socket-ssl-perl/+bug/1013883/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1075156] [NEW] Zonesigner decides on its own to include DS for signed childzone.

2012-11-05 Thread Sander Smeenk
Public bug reported:

It seems zonesigner (through dnssec-signzone?) decides to include in the
zone being signed, DS-records for subzones/childzones that have key
material on disk even though there are NO DS RECORDS in the zone being
signed at that time.

This just bit me up the a**e.
DNSSEC tools should NOT mess with my zone data other than adding RRSIGs/DNSKEYs.

Also, this behaviour breaks DNSSEC as prepublishing of DNSKEY material
is somewhat impossible this way.

Steps to reproduce:
- Sign example.tld
- Sign sub.example.tld
- Add 'sub IN NS ..' records to example.tld pointing to the same NS-set as 
example.tld
- Resign example.tld

The DS for sub.example.tld is automatically included.
(Keymaterial for all zones has to be in the same directory, i think this is 
caused by use of the -S option to dnssec-signzone).

** Affects: dnssec-tools (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1075156

Title:
  Zonesigner decides on its own to include DS for signed childzone.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnssec-tools/+bug/1075156/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1073515] [NEW] rollerd fails on unknown RRTYPE - but only through start-stop-daemon?

2012-10-31 Thread Sander Smeenk
Public bug reported:

Running Ubuntu Precise  dnssec-tools 1.11-1

I had a TLSA test record in my zone (in the form IN TYPE65468) which
made rollerd bork in the middle of a ZSK roll):

| unrecognized type, line 252
|...propagated at /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm line 164, 
GEN5 line 252.

(don't reassign to Net::DNS just yet!)

While debugging what actually casued this failure (...the error message
could be made much clearer...) i noticed rollerd started fine when i
launched it myself (using exactly the same arguments as the init-script
would):

| [root@services:~] # start-stop-daemon --start --quiet --pidfile 
/var/run/rollerd.pid --exec /usr/sbin/rollerd -- -rrfile 
/etc/bind/dnssec/rollerd_all.rollrec -directory /etc/bind/dnssec
| unrecognized type, line 252
| ...propagated at /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm line 164, GEN5 
line 252.

Versus:

| [root@services:~] # /usr/sbin/rollerd -- -rrfile 
/etc/bind/dnssec/rollerd_all.rollrec -directory /etc/bind/dnssec
| [root@services:~] # ps auxw | grep rollerd
| root 19846  0.0  0.4  69952 20124 ?Ss   11:02   0:00 
/usr/bin/perl /usr/sbin/rollerd -rrfile /etc/bind/dnssec/rollerd_all.rollrec 
-directory /etc/bind/dnssec

It is unclear to me why this happens.

As all my domains are currently in ZSK rollover i'd rather not fiddle
with it too much, but when they are rolled i have a full month to play
around with a testzone and might supply more information on this.

** Affects: dnssec-tools (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1073515

Title:
  rollerd fails on unknown RRTYPE - but only through start-stop-daemon?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnssec-tools/+bug/1073515/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1073515] Re: rollerd fails on unknown RRTYPE - but only through start-stop-daemon?

2012-10-31 Thread Sander Smeenk
** Description changed:

  Running Ubuntu Precise  dnssec-tools 1.11-1
  
  I had a TLSA test record in my zone (in the form IN TYPE65468) which
- made rollerd bork (in the middle of a ZSK roll):
+ made rollerd bork in the middle of a ZSK roll):
  
  | unrecognized type, line 252
  |...propagated at /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm line 164, 
GEN5 line 252.
  
  (don't reassign to Net::DNS just yet!)
  
- While debugging what actually casued this failure (...the error message could 
be made much clearer...)
- i noticed rollerd started fine when i launched it myself (using exactly the 
same arguments as the
- init-script would):
+ While debugging what actually casued this failure (...the error message
+ could be made much clearer...) i noticed rollerd started fine when i
+ launched it myself (using exactly the same arguments as the init-script
+ would):
  
  | [root@services:~] # start-stop-daemon --start --quiet --pidfile 
/var/run/rollerd.pid --exec /usr/sbin/rollerd -- -rrfile 
/etc/bind/dnssec/rollerd_all.rollrec -directory /etc/bind/dnssec
  | unrecognized type, line 252
  | ...propagated at /usr/share/perl5/Net/DNS/ZoneFile/Fast.pm line 164, GEN5 
line 252.
  
  Versus:
  
  | [root@services:~] # /usr/sbin/rollerd -- -rrfile 
/etc/bind/dnssec/rollerd_all.rollrec -directory /etc/bind/dnssec
  | [root@services:~] # ps auxw | grep rollerd
  | root 19846  0.0  0.4  69952 20124 ?Ss   11:02   0:00 
/usr/bin/perl /usr/sbin/rollerd -rrfile /etc/bind/dnssec/rollerd_all.rollrec 
-directory /etc/bind/dnssec
  
  It is unclear to me why this happens.
  
  As all my domains are currently in ZSK rollover i'd rather not fiddle
  with it too much, but when they are rolled i have a full month to play
  around with a testzone and might supply more information on this.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1073515

Title:
  rollerd fails on unknown RRTYPE - but only through start-stop-daemon?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dnssec-tools/+bug/1073515/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1006979] [NEW] Configuring IPv6 addresses, should wait for DAD to succeed

2012-05-31 Thread Sander Smeenk
Public bug reported:

When an interface gets configured for IPv6, the (new) address is
'tentative' by default until DAD (Duplicate Address Detection) succeeds.
During the time the address is marked 'tentative' the OS does not accept
routes to, with or from that address.

This breaks ifup during boot in some situations where extra routes or
source based routing is configured. This could happen on 'inet6 static'
configured interfaces that want to add specific routes via that same
gateway, as illustrated in this example config:

iface eth0 inet6 static
pre-up /bin/echo 0  /proc/sys/net/ipv6/conf/all/accept_ra
address 2001:db8::2
netmask 64
gateway 2001:db8::1
post-up /sbin/ip -6 route add 2001:db8:1::/64 via 2001:db8::1

The post-up route add will not work (all the time). This same problem
also occurs when additional IP-addresses are added to the interface,
f.e., for loadbalancing we require source based routing and we had to
add a sleep in the post-up's to get it to work:

| post-up /sbin/ip -6 addr add fded:e128:5900:1d::1/64 dev eth0
| post-up /bin/sleep 4
| post-up /sbin/ip -6 route add fded:e128:5900:1d::/64 dev eth0 src 
fded:e128:5900:1d::1 table 2
| post-up /sbin/ip -6 route add default via fded:e128:5900:1d:: table 2
| post-up /sbin/ip -6 rule add from fded:e128:5900:1d::/64 lookup 2

That last situation is probably not something ifupdown could (or should)
fix?

Fixes in other distribution include delaying the ifup process until the
address is no longer tentative and failing (verbosely) if it times out.

** Affects: ifupdown (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1006979

Title:
  Configuring IPv6 addresses, should wait for DAD to succeed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ifupdown/+bug/1006979/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 965371] Re: HTTPS requests fail on some sites on Ubuntu 12.04

2012-04-19 Thread Sander Smeenk
I tried the 1.0.1-4ubuntu2 release which seems to work as expected!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/965371

Title:
  HTTPS requests fail on some sites on Ubuntu 12.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/openssl/+bug/965371/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 971817] [NEW] python-configshell depends on full tex suite through python-epydoc

2012-04-02 Thread Sander Smeenk
Public bug reported:

Package 'python-configshell' depends on 'python-epydoc' which pulls in the 
entire TeX suite, TCL, Tk and a lot of X libs on my 
server when i try to install 'targetcli':

Paste: https://8n1.org/raw/8375/d26d
Need to get 440 MB of archives. After this operation, 715 MB of additional 
disk space will be used.

I do not see why i should install ~715MB of TeX, TCL, Tk and X libs to
be able to use the iSCSI LIO cli tools. Since it is python-configshell
which depends on python-epydoc, which seems to be only for documentation
purposes, i'm filing this bug on 'configshell'.

Could this be changed mayhaps?

** Affects: configshell (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/971817

Title:
  python-configshell depends on full tex suite through python-epydoc

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/configshell/+bug/971817/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 966980] [NEW] libssl1.0.0_1.0.1-2ubuntu2 fails to connect to SSLv2 sites breaking wget and others

2012-03-28 Thread Sander Smeenk
Public bug reported:

Installed is libssl1.0.0, pkg version 1.0.1-2ubuntu2 on Ubuntu Precise.
I can't connect to SSL-sites with openssl s_client or other tools compiled 
against libssl like wget and curl:


[root@haze:~] # openssl s_client -connect www.paypal.com:443
CONNECTED(0003)
write:errno=104
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 320 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
[1]861 exit 1 openssl s_client -connect www.paypal.com:443


When forcing SSLv3 with '-ssl3' it works:

[root@haze:~] # openssl s_client -ssl3 -connect www.paypal.com:443
CONNECTED(0003)
depth=2 C = US, O = VeriSign, Inc., OU = VeriSign Trust Network, OU = (c) 
2006 VeriSign, Inc. - For authorized use only, CN = VeriSign Class 3 Public 
Primary Certification Authority - G5
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
[ .. ]


Also, the '-ssl2' option does not work although advertised:

[root@haze:~] # openssl s_client foobar 21 | grep ssl2
 -ssl2 - just use SSLv2
 -no_tls1_2/-no_tls1_1/-no_tls1/-no_ssl3/-no_ssl2 - turn off that protocol

[root@haze:~] # openssl s_client -ssl2 -connect bitkeys.bit.nl:443
unknown option -ssl2
usage: s_client args
[ .. ]


Tshark logs for 'openssl s_client -connect www.paypal.com:443':
  0.00 192.168.0.55 - 66.211.169.2 TCP 74 39271  443 [SYN] Seq=0 
Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=55150170 TSecr=0 WS=64
  0.154815 66.211.169.2 - 192.168.0.55 TCP 78 443  39271 [SYN, ACK] Seq=0 
Ack=1 Win=4380 Len=0 MSS=1460 WS=1 TSval=1488937822 TSecr=55150170 SACK_PERM=1
  0.154856 192.168.0.55 - 66.211.169.2 TCP 66 39271  443 [ACK] Seq=1 Ack=1 
Win=14656 Len=0 TSval=55150209 TSecr=1488937822
  0.155119 192.168.0.55 - 66.211.169.2 SSL 386 Client Hello
  0.409902 66.211.169.2 - 192.168.0.55 TCP 66 443  39271 [ACK] Seq=1 Ack=321 
Win=4700 Len=0 TSval=1488938077 TSecr=55150209
 53.554408 192.168.0.55 - 66.211.169.2 TCP 66 39271  443 [FIN, ACK] Seq=321 
Ack=1 Win=14656 Len=0 TSval=55163559 TSecr=1488938077
 53.709382 66.211.169.2 - 192.168.0.55 TCP 66 443  39271 [ACK] Seq=1 Ack=322 
Win=4700 Len=0 TSval=1488991376 TSecr=55163559
 53.709428 66.211.169.2 - 192.168.0.55 TCP 66 443  39271 [FIN, ACK] Seq=1 
Ack=322 Win=4700 Len=0 TSval=1488991376 TSecr=55163559
 53.709453 192.168.0.55 - 66.211.169.2 TCP 66 39271  443 [ACK] Seq=322 Ack=2 
Win=14656 Len=0 TSval=55163598 TSecr=1488991376


Tshark logs for 'openssl s_client -ssl3 -connect www.paypal.com:443':
 79.458256 192.168.0.55 - 66.211.169.2 TCP 74 39272  443 [SYN] Seq=0 
Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=55170035 TSecr=0 WS=64
 79.616839 66.211.169.2 - 192.168.0.55 TCP 78 443  39272 [SYN, ACK] Seq=0 
Ack=1 Win=4380 Len=0 MSS=1460 WS=1 TSval=1489017524 TSecr=55170035 SACK_PERM=1
 79.616881 192.168.0.55 - 66.211.169.2 TCP 66 39272  443 [ACK] Seq=1 Ack=1 
Win=14656 Len=0 TSval=55170075 TSecr=1489017524
 79.617183 192.168.0.55 - 66.211.169.2 SSL 229 Client Hello
 79.776232 66.211.169.2 - 192.168.0.55 SSLv3 1514 Server Hello
 79.776323 192.168.0.55 - 66.211.169.2 TCP 66 39272  443 [ACK] Seq=164 
Ack=1449 Win=17536 Len=0 TSval=55170115 TSecr=1489017683
 79.776476 66.211.169.2 - 192.168.0.55 TCP 2962 [TCP segment of a reassembled 
PDU]
 79.776537 192.168.0.55 - 66.211.169.2 TCP 66 39272  443 [ACK] Seq=164 
Ack=4345 Win=20416 Len=0 TSval=55170115 TSecr=1489017683
 79.934822 66.211.169.2 - 192.168.0.55 SSLv3 201 Certificate, Server Hello Done
 79.934920 192.168.0.55 - 66.211.169.2 TCP 66 39272  443 [ACK] Seq=164 
Ack=4480 Win=23296 Len=0 TSval=55170154 TSecr=1489017842
 79.936254 192.168.0.55 - 66.211.169.2 SSLv3 406 Client Key Exchange, Change 
Cipher Spec, Encrypted Handshake Message
 80.097971 66.211.169.2 - 192.168.0.55 SSLv3 141 Change Cipher Spec, Encrypted 
Handshake Message
 80.136340 192.168.0.55 - 66.211.169.2 TCP 66 39272  443 [ACK] Seq=504 
Ack=4555 Win=23296 Len=0 TSval=55170205 TSecr=1489018005
[ .. session is open .. ]


Downgrading the libssl / openssl binaries to pkg version 1.0.0[gh]
resolves the problem too.


More information by request.

** Affects: openssl (Ubuntu)
 Importance: Undecided
 Status: Confirmed


** Tags: 1.0.1 openssl ssl3

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/966980

Title:
  libssl1.0.0_1.0.1-2ubuntu2 fails to connect to SSLv2 sites breaking
  wget and others

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/966980/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 892747] Re: package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2012-02-07 Thread Sander Smeenk
This affects me too. In a grave way. The package is somewhat unusable
with automated installers and/or puppet/cfengine.


Steps to reproduce:
1) make sure your system has *NO* slapd package installed
2) create /etc/ldap/slapd.conf (contents does not matter)
3) install the slapd package.

Result:
Setting up slapd (2.4.25-1.1ubuntu4.1) ...
  Creating initial configuration... mkdir: cannot create directory 
`/etc/ldap/slapd.conf': File exists
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1


Also, on a sidenote, your postinst script is braindead. Your package
offers a 'no_configuration' debconf  setting but then fails to install
the package since slapd wont start as there is no configuration:

# debconf-show slapd
* slapd/no_configuration: true

# apt-get install slapd
[ .. ]
Setting up slapd (2.4.25-1.1ubuntu4.1) ...
  Omitting slapd configuration as requested.
 * No configuration file was found for slapd at /etc/ldap/slapd.conf.
invoke-rc.d: initscript slapd, action start failed.
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in Ubuntu.
https://bugs.launchpad.net/bugs/892747

Title:
  package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade: subprocess
  installed post-installation script returned error exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/892747/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 892747] Re: package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2012-02-07 Thread Sander Smeenk
This affects me too. In a grave way. The package is somewhat unusable
with automated installers and/or puppet/cfengine.


Steps to reproduce:
1) make sure your system has *NO* slapd package installed
2) create /etc/ldap/slapd.conf (contents does not matter)
3) install the slapd package.

Result:
Setting up slapd (2.4.25-1.1ubuntu4.1) ...
  Creating initial configuration... mkdir: cannot create directory 
`/etc/ldap/slapd.conf': File exists
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1


Also, on a sidenote, your postinst script is braindead. Your package
offers a 'no_configuration' debconf  setting but then fails to install
the package since slapd wont start as there is no configuration:

# debconf-show slapd
* slapd/no_configuration: true

# apt-get install slapd
[ .. ]
Setting up slapd (2.4.25-1.1ubuntu4.1) ...
  Omitting slapd configuration as requested.
 * No configuration file was found for slapd at /etc/ldap/slapd.conf.
invoke-rc.d: initscript slapd, action start failed.
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/892747

Title:
  package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade: subprocess
  installed post-installation script returned error exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/892747/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 669142] Re: if-up.d/if-down.d scripts restart iSCSI inappropriately

2011-11-22 Thread Sander Smeenk
Seeing the same in Maverick and Oneiric. Killed our VM-platform.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/669142

Title:
  if-up.d/if-down.d scripts restart iSCSI inappropriately

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/open-iscsi/+bug/669142/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs