[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1008599: marked as done (debian-edu-config: Don't let fetch-rootca-cert script fail if not on Debian Edu network)

Your message dated Sat, 19 Aug 2023 17:21:58 +0000
with message-id <E1qXPeA-000PHT-FE@fasolo.debian.org>
and subject line Bug#1008599: fixed in debian-edu-config 2.12.35
has caused the Debian Bug report #1008599,
regarding debian-edu-config: Don't let fetch-rootca-cert script fail if not on Debian Edu network
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1008599: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008599
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: debian-edu-config
Version: 2.12.20
Severity: wishlist
When installing standalone Debian Edu machines, the init script fetch-rootca-cert reports failure if the machine is booted on a non-Debian-Edu network.
We should consider it a script failure if fetch-rootca-cert fails to detect the download server (tjener.intern, normally) on the local network. 

So, in what case is this?

  * www.intern cannot be resolved
  * www.intern does not listen on port 443
  * www.intern/Debian-Edu_rootCA.crt cannot be
    found on the webserver
When looking at fetch-rootca-cert, this basically covers all the if-clauses in the script, so it should always exit with exitcode 0. 

The only problem we should capture:

  * www.intern is resolvable
  * but the rootca cert is not available
  * and it does not exist on the local machine already

Comments? Feedback?

Mike


--

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

Attachment: pgpgkpow_XcaK.pgp
Description: Digitale PGP-Signatur


--- End Message ---
--- Begin Message --- 
Source: debian-edu-config
Source-Version: 2.12.35
Done: Mike Gabriel <sunweaver@debian.org>

We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1008599@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Gabriel <sunweaver@debian.org> (supplier of updated debian-edu-config package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 19 Aug 2023 17:00:36 +0200
Source: debian-edu-config
Architecture: source
Version: 2.12.35
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 1008599 1041323 1043407 1049396
Changes:
 debian-edu-config (2.12.35) unstable; urgency=medium
 .
   [ Guido Berhoerster ]
   * Remove configure-edu-gateway. (Closes: #1043407).
     The script is obsoleted by the more sophisticated configuration
     abilities provided by the debian-edu-router-config package.
   * Do not hardcode X2Go desktop to Xfce. (Closes: #1049396).
     Add a commandline option --x2go_desktop for specifying the default desktop
     and make a best effort finding a usable desktop if none is specified.
   * Disable cf-execd on installation. (Closes: #1041323).
     Currently cf-execd is enabled by default if systemd is used (see #1043353)
     but the agent should only be run on installation.
   * Do not attempt to fetch the rootCA cert outside of a DebianEdu network
     An error should only be reported if the machine is inside a DebianEdu
     network, i.e. www.intern is resolvable, but the download fails. (Closes:
     #1008599).
 .
   [ Mike Gabriel ]
   * debian/tests/control: Remove configure-edu-gateway from list of tests.
     Script and testscript are now gone. (Related to closure of #1043407, see
     above).
   * Silence lintian warnings of type 'bash-term-in-posix-shell' by using
     variable names that lintian can't confuse with bash-only pre-set
     variables (e.g. $HOSTNAME or $UID).
Checksums-Sha1:
 e3fdb998a5f86bda83d00b73fa524aeb9058ba44 2017 debian-edu-config_2.12.35.dsc
 bbe1b2301099d9465e5e07596f266c471943384d 356628 debian-edu-config_2.12.35.tar.xz
 1737e2af9c6b10402dd6605cb74bb52bcdd7335d 6733 debian-edu-config_2.12.35_source.buildinfo
Checksums-Sha256:
 820f9d89250cc0977c483c8dc2dbf9450557624d3acf524ea7d31fe7e35e018e 2017 debian-edu-config_2.12.35.dsc
 b8666d8c07b218132c9b3d1108d593bb47520170b8aa83c7af6b8fcd51903b6e 356628 debian-edu-config_2.12.35.tar.xz
 54358304ba6f9f7139ace7e33fabdb18439c152079e344990dfc8d2d13e3d858 6733 debian-edu-config_2.12.35_source.buildinfo
Files:
 78199d44dd961610378262c64552382a 2017 misc optional debian-edu-config_2.12.35.dsc
 4bc0787aed5bd8c14a80452eb00ca98b 356628 misc optional debian-edu-config_2.12.35.tar.xz
 e67d87c35799bdfec8fb1211afb4d218 6733 misc optional debian-edu-config_2.12.35_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmTg3hUVHHN1bndlYXZl
ckBkZWJpYW4ub3JnAAoJEJr0azAldxsx3u4QALA1ao87hRy6WJcZ6XshQyavDoaZ
i9CmIvMkb0OYCIsC3ShVZJhYXNW6kz/j10uZokiK/tINW/O/oyI6XTRGZiZYjEE0
7CSceM3Iuf1AjPwpT3qYzf3fHIEi85HFUEM//eh3wnJe3VaSYEE3WzAeyaIQyv17
2EBZwXFF+aXF1fFiMrfuJbGy+sofZroZYhUyWtw6pmHeYXuBEbGVtS+tFAUh8gLW
jE65wRWRNgLmjtFj0DD2Ztgp/00naI4sqlC5wEGtFCcIiEQGfUGPsxZ73tnGTca1
h5JesQo2KRBSecrnz8cpdF282smbundaYsQeQimpb8+zF50RD1/kbVjyvnf5X8zq
mLZiM83kDk0u43BQRhKWfMDbVoBzaJaP5Iftyh/P0Wr6bk1t2Mb4/HolXRccCwc4
fJpcjYxAXNa049e2TnHev9lH+sAobdSCQjM90CDLIM04j9fb+XQGrP2rFdf0FVUG
08MiKDpmd+3M0xFkSXZGQLv5HPtzT2IaVp4jACzY7JngmkB7OxwE1oYuPxWHaBFa
uYYaPhh/oxhTdqrJ61phV7+cmifjejm97CqA2pDfRzqIL9SC4uzydfJnDWv/qfvt
joEEY9S8lY4Jh0jq7R4VEZY0x5NXbj2Zrf1EmfKvB4Jr3Dy/NkYj3xbfsFeB6fiX
JbUeiMXoAJ1079h5
=QwlE
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: