This bug was fixed in the package curl - 7.88.1-8ubuntu2
---
curl (7.88.1-8ubuntu2) lunar; urgency=medium
* d/p/Use-correct-path-when-loading-libnss-pem-ckbi-.so.patch:
Don't prepend "nss" when opening libnssckbi.so. Rename definition
to _DEB_TARGET_ARCH. (LP: #2016439)
*
I just checked and a rebuild of the test app is not necessary, which is
good, otherwise we would have to chase down anything in the archive that
linked with the libcurl3-nss library package and rebuild those.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
All dep8 failures have been resolved.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to curl in Ubuntu.
https://bugs.launchpad.net/bugs/2016439
Title:
Regression finding system certificates
Status in curl package in Ubuntu:
Verifying the bug for Lunar.
First, make sure we can reproduce the problem. After following the
steps outlined in the Test Plan, we see:
# ./curl-test
curl_easy_perform() failed: SSL peer certificate or SSH remote key was not OK
# apt policy libcurl4-nss-dev
libcurl4-nss-dev:
Installed:
Thanks for the review and for accepting the SRU, Andreas.
The bug can be considered fixed in Mantic, although the change present
there is not exactly the same as the one I uploaded to Lunar (it still
uses $(DEB_HOST_ARCH) instead of $(DEB_TARGET_ARCH), and it
unnecessarily patches the load path
Thanks for the new upload. Please also fix this in mantic, either via a
mantic upload with the same change, or a debian change/upload and later
re-merge in mantic.
** Changed in: curl (Ubuntu Lunar)
Status: In Progress => Fix Committed
** Tags added: verification-needed
** Also affects: curl (Ubuntu Mantic)
Importance: High
Assignee: Sergio Durigan Junior (sergiodj)
Status: In Progress
** Also affects: curl (Ubuntu Lunar)
Importance: Undecided
Status: New
** Changed in: curl (Ubuntu Lunar)
Assignee: (unassigned) => Sergio Durigan
We talked about it and agreed on the following changes:
- don't patch the libnssckbi.so library path anymore, as that one is working in
the original code
- for libnsspem.so, use a debian architecture macro that respects cross
compiles and uses the target arch instead of the host one.
--
You
As I understand it, libnsspem.so is the one in the "wrong" place:
/usr/lib/$ARCH/nss/libnsspem.so
A quick apt-file search on lunar shows that is the only package that
puts something in /usr/lib/$ARCH/nss.
I appended this config to my ~/.pki/nssdb/pkcs11.txt file to test search
paths:
** Description changed:
[ Impact ]
Users of applications that link against libcurl's NSS flavour might
experience issues when trying to contact HTTPS servers. This can lead
to scenarios where the application is unable to connect.
[ Test Plan ]
- TBD.
+ First, let's verify that
** Description changed:
+ [ Impact ]
+
+ Users of applications that link against libcurl's NSS flavour might
+ experience issues when trying to contact HTTPS servers. This can lead
+ to scenarios where the application is unable to connect.
+
+ [ Test Plan ]
+
+ TBD.
+
+ [ Where problems
** Tags added: server-todo
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to curl in Ubuntu.
https://bugs.launchpad.net/bugs/2016439
Title:
Regression finding system certificates
Status in curl package in Ubuntu:
Triaged
** Changed in: curl (Debian)
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to curl in Ubuntu.
https://bugs.launchpad.net/bugs/2016439
Title:
Regression finding system certificates
** Bug watch added: Debian Bug tracker #1034359
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034359
** Also affects: curl (Debian) via
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034359
Importance: Unknown
Status: Unknown
--
You received this bug notification
14 matches
Mail list logo
