Bug#739526: pu: package polarssl/1.2.9-1~deb7u2
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: pu
Hi,
I'm attaching my proposal for polarssl 1.2.9-1~deb7u2 for stable, as discussed
with Moritz at #738854.
Thanks in advance,
Roland
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 3.12-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
diff -ruN polarssl-1.2.9.orig/debian/changelog polarssl-1.2.9/debian/changelog
--- polarssl-1.2.9.orig/debian/changelog 2013-10-16 20:15:19.000000000 +0200
+++ polarssl-1.2.9/debian/changelog 2014-02-16 12:16:50.872530746 +0100
@@ -1,3 +1,10 @@
+polarssl (1.2.9-1~deb7u2) stable; urgency=medium
+
+ * Fix FTBFS bug due to expired certificates, backport from upstream 1.3.4,
+ thanks to Moritz Mühlenhoff (Closes: #738854)
+
+ -- Roland Stigge <stigge@antcom.de> Sun, 16 Feb 2014 12:14:50 +0100
+
polarssl (1.2.9-1~deb7u1) stable-security; urgency=low
* New upstream release
diff -ruN polarssl-1.2.9.orig/debian/patches/04-update-certs-in-testsuite.patch polarssl-1.2.9/debian/patches/04-update-certs-in-testsuite.patch
--- polarssl-1.2.9.orig/debian/patches/04-update-certs-in-testsuite.patch 1970-01-01 01:00:00.000000000 +0100
+++ polarssl-1.2.9/debian/patches/04-update-certs-in-testsuite.patch 2014-02-16 12:14:44.934546316 +0100
@@ -0,0 +1,113 @@
+The test suite certificate is expired. This was fixed in 1.3.4, so
+update the affected certs.
+
+--- polarssl-1.2.9.orig/tests/data_files/server1.crt
++++ polarssl-1.2.9/tests/data_files/server1.crt
+@@ -1,60 +1,3 @@
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 1 (0x1)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C=NL, O=PolarSSL, CN=PolarSSL Test CA
+- Validity
+- Not Before: Feb 12 14:44:06 2011 GMT
+- Not After : Feb 12 14:44:06 2021 GMT
+- Subject: C=NL, O=PolarSSL, CN=PolarSSL Server 1
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- RSA Public Key: (2048 bit)
+- Modulus (2048 bit):
+- 00:a9:02:1f:3d:40:6a:d5:55:53:8b:fd:36:ee:82:
+- 65:2e:15:61:5e:89:bf:b8:e8:45:90:db:ee:88:16:
+- 52:d3:f1:43:50:47:96:12:59:64:87:6b:fd:2b:e0:
+- 46:f9:73:be:dd:cf:92:e1:91:5b:ed:66:a0:6f:89:
+- 29:79:45:80:d0:83:6a:d5:41:43:77:5f:39:7c:09:
+- 04:47:82:b0:57:39:70:ed:a3:ec:15:19:1e:a8:33:
+- 08:47:c1:05:42:a9:fd:4c:c3:b4:df:dd:06:1f:4d:
+- 10:51:40:67:73:13:0f:40:f8:6d:81:25:5f:0a:b1:
+- 53:c6:30:7e:15:39:ac:f9:5a:ee:7f:92:9e:a6:05:
+- 5b:e7:13:97:85:b5:23:92:d9:d4:24:06:d5:09:25:
+- 89:75:07:dd:a6:1a:8f:3f:09:19:be:ad:65:2c:64:
+- eb:95:9b:dc:fe:41:5e:17:a6:da:6c:5b:69:cc:02:
+- ba:14:2c:16:24:9c:4a:dc:cd:d0:f7:52:67:73:f1:
+- 2d:a0:23:fd:7e:f4:31:ca:2d:70:ca:89:0b:04:db:
+- 2e:a6:4f:70:6e:9e:ce:bd:58:89:e2:53:59:9e:6e:
+- 5a:92:65:e2:88:3f:0c:94:19:a3:dd:e5:e8:9d:95:
+- 13:ed:29:db:ab:70:12:dc:5a:ca:6b:17:ab:52:82:
+- 54:b1
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Basic Constraints:
+- CA:FALSE
+- X509v3 Subject Key Identifier:
+- 1F:74:D6:3F:29:C1:74:74:45:3B:05:12:2C:3D:A8:BD:43:59:02:A6
+- X509v3 Authority Key Identifier:
+- keyid:B4:5A:E4:A5:B3:DE:D2:52:F6:B9:D5:A6:95:0F:EB:3E:BC:C7:FD:FF
+-
+- Signature Algorithm: sha1WithRSAEncryption
+- bd:cf:96:c1:95:1e:9a:c2:6e:d8:88:88:d8:2a:7a:96:20:3e:
+- 50:0b:c8:c7:df:1d:41:ed:e4:66:cd:b3:02:81:7d:57:04:1b:
+- 5d:c6:33:59:0f:c1:20:b9:23:34:89:8a:6c:f2:fd:c7:48:36:
+- 8c:80:e7:e1:9b:c6:60:5c:b0:33:02:0e:fd:df:be:61:bc:18:
+- 89:0c:38:db:fb:fb:46:23:32:f7:8c:c1:3e:7c:de:1e:2f:3a:
+- 77:2f:f4:8e:93:8e:25:4c:77:21:74:6c:18:b7:72:8d:bf:f5:
+- 4f:5d:64:95:c1:6a:1a:70:11:88:af:bc:55:8a:25:30:f3:fa:
+- 69:f2:af:2d:75:fb:2b:89:22:52:9b:05:42:15:29:13:95:5e:
+- 33:9a:55:d4:c7:22:d8:44:ce:25:ab:b6:70:ee:34:14:9b:c8:
+- fc:2f:56:ff:04:7e:18:00:2b:31:ac:36:7f:11:bb:ec:4d:e5:
+- 69:a6:b4:2c:03:a5:7b:13:3a:03:82:8e:6f:97:f9:70:64:cc:
+- e4:88:7a:b4:41:79:15:5a:b7:ff:db:f3:34:86:0c:6b:51:6a:
+- cd:a7:01:2d:91:7c:cd:21:d8:2c:48:a6:5c:17:73:8c:1a:0d:
+- e2:a0:d4:fd:6c:d1:c9:84:41:46:30:08:e3:d9:b3:1d:7e:ab:
+- 6a:57:aa:9f
+ -----BEGIN CERTIFICATE-----
+ MIIDPzCCAiegAwIBAgIBATANBgkqhkiG9w0BAQUFADA7MQswCQYDVQQGEwJOTDER
+ MA8GA1UEChMIUG9sYXJTU0wxGTAXBgNVBAMTEFBvbGFyU1NMIFRlc3QgQ0EwHhcN
+--- polarssl-1.2.9.orig/tests/data_files/cert_example_multi_nocn.crt
++++ polarssl-1.2.9/tests/data_files/cert_example_multi_nocn.crt
+@@ -1,33 +1,13 @@
+ -----BEGIN CERTIFICATE-----
+-MIIFiTCCA3GgAwIBAgIDC0EHMA0GCSqGSIb3DQEBBQUAMHkxEDAOBgNVBAoTB1Jv
+-b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ
+-Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y
+-dEBjYWNlcnQub3JnMB4XDTEyMDEyMjEzMzEzNFoXDTE0MDEyMTEzMzEzNFowADCC
+-ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKdnVW27pPxX6JD8XER1w2P/
+-8E8g44KtOtgIFIMnaoUAwNOePDvo8HfGo06AVCRntCPfGHJu5t5EmuudQjvC7gcL
+-Of1/LIFXFhe59f8yH5peGV8rPKyyNNV3YCIAn1WmuaP9a/Yk7YEvYOBntFVTIFvN
+-s0x7jmyCz7A51WApun91Z6Qz2muiUDb9mmfX/INR63p1TDG9PeGzUIaZFFZt8BYH
+-NTyu95cxpUOTBCFi4pOj/WBuF2MPUv7RRYOHfBOnAS3h7+8eOX/oNu9YUhneVbuE
+-Zqs47lbITTi6tmpYnZQ8gQdJQrfDLI/taw6oIRXhH1U/P1NYlGcz8/BbC33FOA0C
+-AwEAAaOCAZEwggGNMAwGA1UdEwEB/wQCMAAwNAYDVR0lBC0wKwYIKwYBBQUHAwIG
+-CCsGAQUFBwMBBglghkgBhvhCBAEGCisGAQQBgjcKAwMwCwYDVR0PBAQDAgWgMDMG
+-CCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuY2FjZXJ0Lm9y
+-Zy8wggEDBgNVHREEgfswgfiCHHd3dy5zaG90b2thbi1icmF1bnNjaHdlaWcuZGWg
+-KgYIKwYBBQUHCAWgHgwcd3d3LnNob3Rva2FuLWJyYXVuc2Nod2VpZy5kZYIUd3d3
+-Lm1hc3NpbW8tYWJhdGUuZXWgIgYIKwYBBQUHCAWgFgwUd3d3Lm1hc3NpbW8tYWJh
+-dGUuZXWCFHd3dy5tYXNzaW1vLWFiYXRlLmRloCIGCCsGAQUFBwgFoBYMFHd3dy5t
+-YXNzaW1vLWFiYXRlLmRlghR3d3cubWFzc2ltby1hYmF0ZS5pdKAiBggrBgEFBQcI
+-BaAWDBR3d3cubWFzc2ltby1hYmF0ZS5pdDANBgkqhkiG9w0BAQUFAAOCAgEAT8uP
+-gDouHoXj4iMF0iqJTGp27zyaBajKZ3Lkxjks/YsH/vJfqLTFtVqr5EWTQHbOelZf
+-Ijpagiv2Qz/wfKSK9Bi9oEiB1WiTxtfI5nX5bWtWcLk44OaxMFpEQUflgvbqQqLV
+-+YCUgXf2fKDtGmXF6edE6luEN0UGC29lYW5DF7KHRkM3Eu/7KZG9PfJO5evhb7Os
+-LMsEWl3ESJjFDzgkfrWFqKOXO2sRfzRaagPgeZMVxFMDgtvarRU0aumOTftcX1yD
+-ayc5a71i03cbo7p1UhfcivQ30d3wfhVOdmsr99agPLolqKQaxGs5INf7T9v98Obf
+-1Ax8jrT5VcH/74MCReBbE6wwr8CiSrHVyzFLK828jeStw9vNqlUh/Ny6pf4au2C3
+-vmFTlEd0riCvvRQYRa/qQSwLD36rfFd8grdvD4Brw0gJkRjmkEy37bM35op0mZFu
+-6eaWURasEUgG6IFBtAGRvZFxSHCbM6o6KMNbTsaCYMfHszCJwzSSCYo1n1qqgE2r
+-JITT2l/XA/KBwKnH+XpKPe4ffpfkCFUdm2phxe41HBLcbLdPjvvrDfU1IcdSAVVR
+-4swr+Kd3S044WL660s1h4xpFkWc0KG9ghe4vOUlmwqV7mO8EhLyu4ustyep2Jv2e
+-91oCC+CDllr3qfAUQOUcqlSPWogMZ9tTDx58ids=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+ -----END CERTIFICATE-----
+-
diff -ruN polarssl-1.2.9.orig/debian/patches/series polarssl-1.2.9/debian/patches/series
--- polarssl-1.2.9.orig/debian/patches/series 2014-02-16 12:14:30.030784983 +0100
+++ polarssl-1.2.9/debian/patches/series 2014-02-16 12:14:44.934546316 +0100
@@ -1,3 +1,4 @@
01-config.patch
02-makefile-destdir-fix.patch
03-library-makefile-adjustments.patch
+04-update-certs-in-testsuite.patch
Reply to: