Bug#831569: libwebsockets: please make the build reproducible
Control: tag -1 + pending On Tue, Sep 20, 2016 at 12:38:10PM +0100, Chris Lamb wrote: > Dear Maintainer, > > > Source: libwebsockets > > Version: 1.2.2-1 > > Tags: patch > > There hasn't seem to be any update on this bug in 64 days, in which > time the Reproducible Builds effort has come on a long way. :) > > Would you consider applying this patch and uploading? Hi, Thanks for doing the work, and sorry for the delayed reply! I've now included the patch in our Git repository; after some more work, it should be uploaded to experimental in the next couple of days and then, hopefully, to unstable soonish thereafter. Thanks again for all your work on reproducible builds! G'luck, Peter -- Peter Pentchev r...@ringlet.net r...@freebsd.org p...@storpool.com PGP key:http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint 2EE7 A7A5 17FC 124C F115 C354 651E EFB0 2527 DF13 signature.asc Description: PGP signature
Bug#831569: libwebsockets: please make the build reproducible
Hi Peter > There hasn't seem to be any update on this bug in 64 days, in which > time the Reproducible Builds effort has come on a long way. :) > > Would you consider applying this patch and uploading? are you aware of the two bug affecting this package? thanks, G. signature.asc Description: OpenPGP digital signature
Bug#831569: libwebsockets: please make the build reproducible
Dear Maintainer, > Source: libwebsockets > Version: 1.2.2-1 > Tags: patch There hasn't seem to be any update on this bug in 64 days, in which time the Reproducible Builds effort has come on a long way. :) Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#831569: libwebsockets: please make the build reproducible
Source: libwebsockets Version: 1.7.3-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi, Whilst working on the "reproducible builds" effort [0], we noticed that libwebsockets could not be built reproducibly. Patch attached. Whilst it uses a deterministic key (!!), this is a) a test server and b) key was not being varied for each installation prior to this patch, so it is "no worse". [0] https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- --- a/debian/keys/libwebsockets-test-server.key.pem 1970-01-01 02:00:00.0 +0200 --- b/debian/keys/libwebsockets-test-server.key.pem 2016-07-17 13:53:45.083618700 +0200 @@ -0,0 +1,16 @@ +-BEGIN PRIVATE KEY- +MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAM8ZUC3tOkX70b0x +I9wneuXYkaCuwnH4RJ7INmYKzHAJG1Efu54w774mSi1dcoyBDY9z9fjHPLFIweV8 +UOqeWpTdyYjN30lnEyZAan1Or7LQsJyiMUpJ8GlGTOi9ZMEPNO8KF780RhWoa/h8 +8+GCboTAcNOf47HK42y7kREYiFOlAgMBAAECgYAHqCDtwcKQydGkVAfGYPNLQimI +Lk3kFtC6qh5QwX9zePK4mhq+q4KBnjrJ2JWemjrdHeVvMDaPO2hnyqPXOMmSfFml +O1P1psR5NW5wSBcYE11Meg6gEarkPu3jiRvCxkeQIRn0L1MxNerSzOkNwEqCQ1vH +kOZlrSdv59BbM47lYQJBAPhJ5QfcECG4axwqs/jBbBibit4BooEGInH03MYCaaUr +XDf2uSQqYRMdOHBcfCTjPrAugI/U1cmXYJAXJYDbLXkCQQDVh+zIhzAbm5rtWKVA +cXsuRQ2btbeaHVEYyykgjtWPnVcpY/ppWJx7hj+aE+RuUMnUCB3z2i7HmRAofYLK +6IiNAkEAkjXpslwr/797C8Y13zn/7unBuAScboBvTk4UqGIJVmOXVblrw1lVew0N +DFXaIVrUsqlfudNq5eDH03Jd+miXeQJAAx1kethd/0kZzXSJlJMTNO2U8TyJXRoo +YLA1/V+YBexJpTTsJjVAsxyWOO0pW+KZzxn/Ndts60R0U+Lg0Yzq0QJBAL9v/cqP +sBXBbTDp4ZxTCfWh4uOQNn748FK6mBfclBk3+IOwx7/1anmv3+O3bTinV2KuyW8F +IYYyvBhRllIRUD4= +-END PRIVATE KEY- --- a/debian/keys/libwebsockets-test-server.pem 1970-01-01 02:00:00.0 +0200 --- b/debian/keys/libwebsockets-test-server.pem 2016-07-17 13:53:51.091669875 +0200 @@ -0,0 +1,18 @@ +-BEGIN CERTIFICATE- +MIIC3DCCAkWgAwIBAgIJAPTZ5EUcA04BMA0GCSqGSIb3DQEBCwUAMIGGMQswCQYD +VQQGEwJHQjEQMA4GA1UECAwHRXJld2hvbjETMBEGA1UEBwwKQWxsIGFyb3VuZDEb +MBkGA1UECgwSbGlid2Vic29ja2V0cy10ZXN0MRIwEAYDVQQDDAlsb2NhbGhvc3Qx +HzAdBgkqhkiG9w0BCQEWEG5vbmVAaW52YWxpZC5vcmcwHhcNMTYwNzE3MTEyMzAy +WhcNNDMxMjAzMTEyMzAyWjCBhjELMAkGA1UEBhMCR0IxEDAOBgNVBAgMB0VyZXdo +b24xEzARBgNVBAcMCkFsbCBhcm91bmQxGzAZBgNVBAoMEmxpYndlYnNvY2tldHMt +dGVzdDESMBAGA1UEAwwJbG9jYWxob3N0MR8wHQYJKoZIhvcNAQkBFhBub25lQGlu +dmFsaWQub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPGVAt7TpF+9G9 +MSPcJ3rl2JGgrsJx+ESeyDZmCsxwCRtRH7ueMO++JkotXXKMgQ2Pc/X4xzyxSMHl +fFDqnlqU3cmIzd9JZxMmQGp9Tq+y0LCcojFKSfBpRkzovWTBDzTvChe/NEYVqGv4 +fPPhgm6EwHDTn+OxyuNsu5ERGIhTpQIDAQABo1AwTjAdBgNVHQ4EFgQUfBTyeWQo +M3FwTh5Z2uGrpkLNBdIwHwYDVR0jBBgwFoAUfBTyeWQoM3FwTh5Z2uGrpkLNBdIw +DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQAw4SDtCjUwBQEaRWJebmbv +BFRyAj3TJXJHy58K6rR3ejKnTkhfoUO3pcls+kbANbUuaD+hQs8KGA2sb8yG6aYI +QVkZKTwK+lqQ5I0PRwXsnz7qmGySjgQPfDZTSB0VPjXA0QAjibObi+QKKXl6J4ed +432JtwMXX/wQ+iJtjUAEOg== +-END CERTIFICATE- --- a/debian/libwebsockets-test-server-common.install 2016-07-17 13:22:43.963341073 +0200 --- b/debian/libwebsockets-test-server-common.install 2016-07-17 13:57:15.969410550 +0200 @@ -1 +1,2 @@ usr/share/libwebsockets-test-server/* +debian/keys/* usr/share/libwebsockets-test-server
