Bug#1054465: Separate HTTP/2 into conf-available

2023-10-24 Thread Dennis Camera
Package: lighttpd Version: 1.4.69-1 Dear maintainer, With the recent discovery of the HTTP/2 Rapid Reset vulnerability (CVE-2023-44487) I took a closer look at the web services I host on lighttpd and came to the conclusion that the increased complexity of HTTP/2 provides no benefit to these

Bug#1038789: Enable capabilities feature

2023-06-28 Thread Dennis Camera
Hi Guillem, On Wed, 28 Jun 2023 01:57:27 +0200 Guillem Jover wrote: > Some time ago I asked on d-d whether anyone would have an issue with > dpkg.deb in Debian linking against libcap [D]. And where I had worked > on the following branch: > > >

Bug#1038789: Enable capabilities feature

2023-06-21 Thread Dennis Camera
Package: openrc Version: 0.45.2-2 Severity: wishlist Dear maintainer, please consider enabling capabilities support in OpenRC. Support for Linux capabilities was added in OpenRC 0.45. Capabilities support in OpenRC would be useful for different situations. The most important use cases I can

Bug#1036086: Extended autopkgtest

2023-05-15 Thread Dennis Camera
Package: easy-rsa Tags: patch Dear maintainer, Some time ago I had written test scripts for the bugs #995156 and #1032270. I tried to extend the existing autopkgtest script for easy-rsa a bit with code from these scripts. Please find attached an extended version of the basic-tests autopkgtest

Bug#1032270: regression in --req-cn option

2023-03-31 Thread Dennis Camera
Dear Bastian, I noticed that you applied the patch I suggested for #995156. Is there any chance you could also apply the patch I posted in my last message to address this bug? Since I use the --req-cn option in our production PKI, it not working would block us from upgrading to bookworm once it

Bug#995156: easy-rsa: vars Autodetection

2023-03-15 Thread Dennis Camera
On Wed, 1 Mar 2023 19:05:13 +0200, Adrian Bunk wrote: > Has anyone discussed this with upstream? > > This seems to be an area with frequent changes upstream, adding a >patch > that is not a backport from upstream might be a bad idea. From what I can tell upstream has addressed this issue in

Bug#1032270: regression in --req-cn option

2023-03-15 Thread Dennis Camera
On Thu, 2 Mar 2023 16:23:01 +0100 Dennis Camera wrote: > The correct behaviour of the --req-cn option was restored in upstream > version 3.1.1. I attached a patch based on upstream commit fe3cced16c62de5dd33f3a230ee03e904306a55b which fixes the behaviour of --req-cn. --- a/easyrsa3/easyrs

Bug#1032270: regression in --req-cn option

2023-03-02 Thread Dennis Camera
Package: easy-rsa Version: 3.1.0-0.1 Severity: important Dear maintainer, I noticed a regression in easy-rsa 3.1.0 compared to easy-rsa 3.0.8 shipping in bullseye. The --req-cn option is ignored by easy-rsa 3.1.0 when the gen-req command is used. Using the test script attached I get the

Bug#1017911: zfsutils-linux: Install zfs-load-key init script, too

2022-08-22 Thread Dennis Camera
for auto-mounting encrypted file systems at boot, since MOUNT_EXTRA_OPTIONS="-l" in /etc/default/zfs does not work anymore with version 2.1.x. Best regards, Dennis Camera