[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#863626: unblock: dns-root-data/2017041101



Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package dns-root-data

Dear release team,

the 2017041101 update of dns-root-data package contains:

- fixes to parse_root_data.sh script to unfail the non-dash
  shells - closes RC bug #862252 (use printf instead of echo command)
- update root.hints to 2017041101 version (no other change then version though)
- update root.key and d/rules to strip any timestamp, so the build is
  more or less reproducible (the get_orig_source still depends on
  upstream data at the time of the build, but it should be more
  reliable)
- little fixes to parse_root_data.sh script, as suggested by shellcheck:
  + use read -r instead of read on xml2 output data
  + use [:upper:]/[:lower:] instead of [A-Z]/[a-z] as tr argument
  + use [ a ] || [ b ] syntax instead of [ a -o b ]

unblock dns-root-data/2017041101

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.4.0-67-generic (SMP w/24 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 3.0 (native)
Source: dns-root-data
Binary: dns-root-data
Architecture: all
Version: 2017041101
Maintainer: Debian DNS Maintainers <pkg-dns-devel@lists.alioth.debian.org>
Uploaders: Ondřej Surý <ondrej@debian.org>, Robert Edmonds <edmonds@debian.org>
Homepage: https://data.iana.org/root-anchors/
Standards-Version: 3.9.6
Vcs-Browser: http://git.debian.org/?p=pkg-dns/dns-root-data.git;a=summary
Vcs-Git: git://git.debian.org/pkg-dns/dns-root-data.git
Build-Depends: debhelper (>= 8.0.0), unbound-anchor, openssl, ldnsutils, xml2
Package-List:
 dns-root-data deb misc optional arch=all
Checksums-Sha1:
 36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
Checksums-Sha256:
 c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz
Files:
 4982844cb0e3b0223fdc93bf9671adc3 14316 dns-root-data_2017041101.tar.xz

-----BEGIN PGP SIGNATURE-----
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=pbH7
-----END PGP SIGNATURE-----
diff -Nru dns-root-data-2017020200/debian/changelog dns-root-data-2017041101/debian/changelog
--- dns-root-data-2017020200/debian/changelog	2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/debian/changelog	2017-05-29 14:05:37.000000000 +0200
@@ -1,3 +1,12 @@
+dns-root-data (2017041101) unstable; urgency=medium
+
+  * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
+  * Update to 2017041101 version of root zone
+  * Remove timestamps from root.key to make the build reproducible
+  * Shell syntax cleanup
+
+ -- Ondřej Surý <ondrej@debian.org>  Mon, 29 May 2017 14:05:37 +0200
+
 dns-root-data (2017020200) unstable; urgency=medium
 
   * Update to 2016102001 version of the root.zone
diff -Nru dns-root-data-2017020200/debian/rules dns-root-data-2017041101/debian/rules
--- dns-root-data-2017020200/debian/rules	2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/debian/rules	2017-05-29 14:05:37.000000000 +0200
@@ -32,6 +32,6 @@
 	/usr/sbin/unbound-anchor \
 		-a $(CURDIR)/root-auto.key \
 		-c $(CURDIR)/icannbundle.pem || echo "Check the root-auto.key"
-	< root-auto.key grep -Ev "^($$|;)" > root.key
+	< root-auto.key grep -Ev "^($$|;)" | sed -e 's/ ;;count=.*//' > root.key
 	rm root-auto.key
 	wget -O $(CURDIR)/root.hints "http://www.internic.net/domain/named.root";
diff -Nru dns-root-data-2017020200/parse-root-anchors.sh dns-root-data-2017041101/parse-root-anchors.sh
--- dns-root-data-2017020200/parse-root-anchors.sh	2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/parse-root-anchors.sh	2017-05-29 14:05:37.000000000 +0200
@@ -5,19 +5,19 @@
 TTL=172800
 
 export IFS="="
-xml2 | while read KEY VAL; do
+xml2 | while read -r KEY VAL; do
     case "$KEY" in
 	"/TrustAnchor/Zone") ZONE="$VAL";;
 	"/TrustAnchor/KeyDigest/KeyTag") KTAG="$VAL";;
 	"/TrustAnchor/KeyDigest/Algorithm") ALGO="$VAL";;
 	"/TrustAnchor/KeyDigest/DigestType") DTYPE="$VAL";;
 	"/TrustAnchor/KeyDigest/Digest")
-	    DIGEST="$(echo "$VAL" | tr "[A-Z]" "[a-z]")"
-	    if [ -z "$ZONE" -o -z "$KTAG" -o -z "$ALGO" -o -z "$DTYPE" ]; then
+	    DIGEST="$(echo "$VAL" | tr "[:upper:]" "[:lower:]")"
+	    if [ -z "$ZONE" ] || [ -z "$KTAG" ] || [ -z "$ALGO" ] || [ -z "$DTYPE" ]; then
 		echo "Missing some KeyDigest parameter"
 		exit 1
 	    fi
-	    echo "$ZONE\t$TTL\tIN\tDS\t$KTAG $ALGO $DTYPE $DIGEST"
+	    printf "%s\t%s\tIN\tDS\t%s %s %s %s\n" "$ZONE" "$TTL" "$KTAG" "$ALGO" "$DTYPE" "$DIGEST"
 	    unset KTAG ALGO DTYPE DIGEST
 	    ;;
     esac
diff -Nru dns-root-data-2017020200/root.hints dns-root-data-2017041101/root.hints
--- dns-root-data-2017020200/root.hints	2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.hints	2017-05-29 14:05:37.000000000 +0200
@@ -9,8 +9,8 @@
 ;           on server           FTP.INTERNIC.NET
 ;       -OR-                    RS.INTERNIC.NET
 ;
-;       last update:    October 20, 2016
-;       related version of root zone:   2016102001
+;       last update:    April 11, 2017
+;       related version of root zone:   2017041101
 ;
 ; formerly NS.INTERNIC.NET
 ;
diff -Nru dns-root-data-2017020200/root.key dns-root-data-2017041101/root.key
--- dns-root-data-2017020200/root.key	2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.key	2017-05-29 14:05:37.000000000 +0200
@@ -1,2 +1,2 @@
-.	172800	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1490169621 ;;Wed Mar 22 09:00:21 2017
+.	172800	IN	DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [  VALID  ]
 .	172800	IN	DNSKEY	257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=0 [  START  ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 29 May 2017 14:05:37 +0200
Source: dns-root-data
Binary: dns-root-data
Architecture: source
Version: 2017041101
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Maintainers <pkg-dns-devel@lists.alioth.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 dns-root-data - DNS root data including root zone and DNSSEC key
Closes: 862252
Changes:
 dns-root-data (2017041101) unstable; urgency=medium
 .
   * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
   * Update to 2017041101 version of root zone
   * Remove timestamps from root.key to make the build reproducible
   * Shell syntax cleanup
Checksums-Sha1:
 22e3448e5f2705b2eb8bce574c64c7690f08b543 1905 dns-root-data_2017041101.dsc
 36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
 4f7dec4a2cd50068b672cfa00397693dbf45aa85 5946 dns-root-data_2017041101_amd64.buildinfo
Checksums-Sha256:
 1f3c5b391d93da9789e2914671bbc75bfb6853a198ffca45b9d5292a308ab748 1905 dns-root-data_2017041101.dsc
 c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz
 ce30c74920a986730e746d0e7213afa7b3f5609e86b0adf343b22effd17560fb 5946 dns-root-data_2017041101_amd64.buildinfo
Files:
 cec66a2e89c12b0f03cca9bdfab5f4e1 1905 misc optional dns-root-data_2017041101.dsc
 4982844cb0e3b0223fdc93bf9671adc3 14316 misc optional dns-root-data_2017041101.tar.xz
 08531207764c72a7912f969b68174ebd 5946 misc optional dns-root-data_2017041101_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=RivQ
-----END PGP SIGNATURE-----

Reply to: