Bug#863626: unblock: dns-root-data/2017041101
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock package dns-root-data
Dear release team,
the 2017041101 update of dns-root-data package contains:
- fixes to parse_root_data.sh script to unfail the non-dash
shells - closes RC bug #862252 (use printf instead of echo command)
- update root.hints to 2017041101 version (no other change then version though)
- update root.key and d/rules to strip any timestamp, so the build is
more or less reproducible (the get_orig_source still depends on
upstream data at the time of the build, but it should be more
reliable)
- little fixes to parse_root_data.sh script, as suggested by shellcheck:
+ use read -r instead of read on xml2 output data
+ use [:upper:]/[:lower:] instead of [A-Z]/[a-z] as tr argument
+ use [ a ] || [ b ] syntax instead of [ a -o b ]
unblock dns-root-data/2017041101
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64
(x86_64)
Kernel: Linux 4.4.0-67-generic (SMP w/24 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 3.0 (native)
Source: dns-root-data
Binary: dns-root-data
Architecture: all
Version: 2017041101
Maintainer: Debian DNS Maintainers <pkg-dns-devel@lists.alioth.debian.org>
Uploaders: Ondřej Surý <ondrej@debian.org>, Robert Edmonds <edmonds@debian.org>
Homepage: https://data.iana.org/root-anchors/
Standards-Version: 3.9.6
Vcs-Browser: http://git.debian.org/?p=pkg-dns/dns-root-data.git;a=summary
Vcs-Git: git://git.debian.org/pkg-dns/dns-root-data.git
Build-Depends: debhelper (>= 8.0.0), unbound-anchor, openssl, ldnsutils, xml2
Package-List:
dns-root-data deb misc optional arch=all
Checksums-Sha1:
36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
Checksums-Sha256:
c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz
Files:
4982844cb0e3b0223fdc93bf9671adc3 14316 dns-root-data_2017041101.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEMLkz2A/OPZgaLTj7DJm3DvT8uwcFAlksENtfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDMw
QjkzM0Q4MEZDRTNEOTgxQTJEMzhGQjBDOTlCNzBFRjRGQ0JCMDcACgkQDJm3DvT8
uwf1vA/9HNXfzN7Z8tUuDm40HsXrCR6vK1KfGpcsoYkqZtyqEnkCSwCjzBCpuXzd
IO9bVVzQaUkzvxVK8Gq0hJaKri7BUKmgRTg9v8MmcIoqmmyi3TIxU5NFUbTgFwaj
qy47bq/gNVJUrYGQJssSE70fHv1iCwWT3Y3xHNdNJfkjiOqIgqgJwB7RzXcPZjgF
ZqzUWelV6vDUE1OsOCo2a8hLRGZa11qK/mbZ8eBhYOwVzf6S/z/tZ7L2y2oUEC3J
u2et1PweqCmQPNC2Xs9KRya9XdFBuMRt4x3EPHygG0u8sziioVaHeNgfNP66gU2g
FlADNfrgS7KLTwXlfHkJ1JLW5/9Zbce3HFdfNGBwESxWSPLJRhCVcycN3N/71T/h
aycV57+hG+rHGOsCdNa9c79KrriikrokBilA31NDmOH77wk6g88EhYtvG7TRbd3S
sCAYPdk06aIAz2V8nMOXATag5iLRrtdlcJaqvmpfB2NyrXWXOlgb0mTc912ACY6B
seDPD3OAmVG5ubOUkBSMyQj7tabjOKkHu+ioYOs3AEYVyIlFxfvle4GwPb6XLaze
gaf5ECU4UdZb/7ARKcX3PEL/UQXxIH3F7CExliqQZ/kqqXD0nWcS16I/BuW+YkwP
86k6ofr1/oxiHbdkFEQvSAocbv2GN74jO2R1Q6p7ptv7K4Ey8Og=
=pbH7
-----END PGP SIGNATURE-----
diff -Nru dns-root-data-2017020200/debian/changelog dns-root-data-2017041101/debian/changelog
--- dns-root-data-2017020200/debian/changelog 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/debian/changelog 2017-05-29 14:05:37.000000000 +0200
@@ -1,3 +1,12 @@
+dns-root-data (2017041101) unstable; urgency=medium
+
+ * Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
+ * Update to 2017041101 version of root zone
+ * Remove timestamps from root.key to make the build reproducible
+ * Shell syntax cleanup
+
+ -- Ondřej Surý <ondrej@debian.org> Mon, 29 May 2017 14:05:37 +0200
+
dns-root-data (2017020200) unstable; urgency=medium
* Update to 2016102001 version of the root.zone
diff -Nru dns-root-data-2017020200/debian/rules dns-root-data-2017041101/debian/rules
--- dns-root-data-2017020200/debian/rules 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/debian/rules 2017-05-29 14:05:37.000000000 +0200
@@ -32,6 +32,6 @@
/usr/sbin/unbound-anchor \
-a $(CURDIR)/root-auto.key \
-c $(CURDIR)/icannbundle.pem || echo "Check the root-auto.key"
- < root-auto.key grep -Ev "^($$|;)" > root.key
+ < root-auto.key grep -Ev "^($$|;)" | sed -e 's/ ;;count=.*//' > root.key
rm root-auto.key
wget -O $(CURDIR)/root.hints "http://www.internic.net/domain/named.root";
diff -Nru dns-root-data-2017020200/parse-root-anchors.sh dns-root-data-2017041101/parse-root-anchors.sh
--- dns-root-data-2017020200/parse-root-anchors.sh 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/parse-root-anchors.sh 2017-05-29 14:05:37.000000000 +0200
@@ -5,19 +5,19 @@
TTL=172800
export IFS="="
-xml2 | while read KEY VAL; do
+xml2 | while read -r KEY VAL; do
case "$KEY" in
"/TrustAnchor/Zone") ZONE="$VAL";;
"/TrustAnchor/KeyDigest/KeyTag") KTAG="$VAL";;
"/TrustAnchor/KeyDigest/Algorithm") ALGO="$VAL";;
"/TrustAnchor/KeyDigest/DigestType") DTYPE="$VAL";;
"/TrustAnchor/KeyDigest/Digest")
- DIGEST="$(echo "$VAL" | tr "[A-Z]" "[a-z]")"
- if [ -z "$ZONE" -o -z "$KTAG" -o -z "$ALGO" -o -z "$DTYPE" ]; then
+ DIGEST="$(echo "$VAL" | tr "[:upper:]" "[:lower:]")"
+ if [ -z "$ZONE" ] || [ -z "$KTAG" ] || [ -z "$ALGO" ] || [ -z "$DTYPE" ]; then
echo "Missing some KeyDigest parameter"
exit 1
fi
- echo "$ZONE\t$TTL\tIN\tDS\t$KTAG $ALGO $DTYPE $DIGEST"
+ printf "%s\t%s\tIN\tDS\t%s %s %s %s\n" "$ZONE" "$TTL" "$KTAG" "$ALGO" "$DTYPE" "$DIGEST"
unset KTAG ALGO DTYPE DIGEST
;;
esac
diff -Nru dns-root-data-2017020200/root.hints dns-root-data-2017041101/root.hints
--- dns-root-data-2017020200/root.hints 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.hints 2017-05-29 14:05:37.000000000 +0200
@@ -9,8 +9,8 @@
; on server FTP.INTERNIC.NET
; -OR- RS.INTERNIC.NET
;
-; last update: October 20, 2016
-; related version of root zone: 2016102001
+; last update: April 11, 2017
+; related version of root zone: 2017041101
;
; formerly NS.INTERNIC.NET
;
diff -Nru dns-root-data-2017020200/root.key dns-root-data-2017041101/root.key
--- dns-root-data-2017020200/root.key 2017-03-22 09:06:08.000000000 +0100
+++ dns-root-data-2017041101/root.key 2017-05-29 14:05:37.000000000 +0200
@@ -1,2 +1,2 @@
-. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=1490169621 ;;Wed Mar 22 09:00:21 2017
+. 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state=2 [ VALID ]
. 172800 IN DNSKEY 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=0 [ START ]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 29 May 2017 14:05:37 +0200
Source: dns-root-data
Binary: dns-root-data
Architecture: source
Version: 2017041101
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Maintainers <pkg-dns-devel@lists.alioth.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
dns-root-data - DNS root data including root zone and DNSSEC key
Closes: 862252
Changes:
dns-root-data (2017041101) unstable; urgency=medium
.
* Fix parse-root-anchors.sh in non-dash shells (Closes: #862252)
* Update to 2017041101 version of root zone
* Remove timestamps from root.key to make the build reproducible
* Shell syntax cleanup
Checksums-Sha1:
22e3448e5f2705b2eb8bce574c64c7690f08b543 1905 dns-root-data_2017041101.dsc
36bfc25763062a4ccc784ced1d821faf8a3f442e 14316 dns-root-data_2017041101.tar.xz
4f7dec4a2cd50068b672cfa00397693dbf45aa85 5946 dns-root-data_2017041101_amd64.buildinfo
Checksums-Sha256:
1f3c5b391d93da9789e2914671bbc75bfb6853a198ffca45b9d5292a308ab748 1905 dns-root-data_2017041101.dsc
c88bb15f1e16dba1a525928e190999fdc70b16d06e40f2aa9c7b81c4740c30d5 14316 dns-root-data_2017041101.tar.xz
ce30c74920a986730e746d0e7213afa7b3f5609e86b0adf343b22effd17560fb 5946 dns-root-data_2017041101_amd64.buildinfo
Files:
cec66a2e89c12b0f03cca9bdfab5f4e1 1905 misc optional dns-root-data_2017041101.dsc
4982844cb0e3b0223fdc93bf9671adc3 14316 misc optional dns-root-data_2017041101.tar.xz
08531207764c72a7912f969b68174ebd 5946 misc optional dns-root-data_2017041101_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=RivQ
-----END PGP SIGNATURE-----
Reply to: