Hi Jonathan,
my mistake. Somehow I thought the 2017020200 has been already unblocked
for testing.
I did the 2017041101 build and unblock bug in parallel, and I have just
uploaded the package to unstable.
So for the 2015052300+h+1 -> 2017020200 changes:
* This fixes FTBFS because:
a) ICANN/IANA doesn't provide OpenPGP signatures anymore
b) The parsing was broken with introduction of second key
This includes changes in d/rules + new parse-root-anchors.sh script.
* Several dead-upstream ICANN files were removed from the package:
- draft-icann-dnssec-trust-anchor.html
- draft-icann-dnssec-trust-anchor.txt
- icannbundle.p12
- icann.pgp
- root-anchors.p7s
(e.g. in fact it was a removal of ICANN-copyright document)
The licensing on ICANN files was acked by ftp-masters as OK.
$ diffstat dns-root-data_2017020200.debdiff
/home/ondrej/tmp/wrtzCZn7bu/dns-root-data-2017020200/icann.pgp
|binary
/home/ondrej/tmp/wrtzCZn7bu/dns-root-data-2017020200/icannbundle.p12
|binary
/home/ondrej/tmp/wrtzCZn7bu/dns-root-data-2017020200/root-anchors.p7s
|binary
dns-root-data-2017020200/debian/changelog |
14
dns-root-data-2017020200/debian/control |
5
dns-root-data-2017020200/debian/dns-root-data.docs |
2
dns-root-data-2017020200/debian/rules |
18
dns-root-data-2017020200/draft-icann-dnssec-trust-anchor.html |
555 ---------
dns-root-data-2017020200/draft-icann-dnssec-trust-anchor.txt |
560 ----------
dns-root-data-2017020200/icannbundle.pem |
200 +--
dns-root-data-2017020200/parse-root-anchors.sh |
25
dns-root-data-2017020200/root-anchors.asc |
7
dns-root-data-2017020200/root-anchors.xml |
8
dns-root-data-2017020200/root.hints |
8
dns-root-data-2017020200/root.key |
3
15 files changed, 117 insertions(+), 1288 deletions(-)
Cheers,
--
Ondřej Surý <ondrej@sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware,
fast DNS(SEC) resolver
On Mon, May 29, 2017, at 14:47, Jonathan Wiltshire wrote:
> Control: tag -1 moreinfo
>
> On Mon, May 29, 2017 at 02:17:30PM +0200, Ondřej Surý wrote:
> > the 2017041101 update of dns-root-data package contains:
> >
> > - fixes to parse_root_data.sh script to unfail the non-dash
> > shells - closes RC bug #862252 (use printf instead of echo command)
> > - update root.hints to 2017041101 version (no other change then version though)
> > - update root.key and d/rules to strip any timestamp, so the build is
> > more or less reproducible (the get_orig_source still depends on
> > upstream data at the time of the build, but it should be more
> > reliable)
> > - little fixes to parse_root_data.sh script, as suggested by shellcheck:
> > + use read -r instead of read on xml2 output data
> > + use [:upper:]/[:lower:] instead of [A-Z]/[a-z] as tr argument
> > + use [ a ] || [ b ] syntax instead of [ a -o b ]
>
> This does not seem to reflect unstable right now; you have:
>
> dns-root-data | 2015052300+h+1 | testing | source, all
> dns-root-data | 2017020200 | unstable | source, all
>
> The delta therefore includes many more changes, including addition of an
> ICANN-copyright document with no (obvious) distribution license.
>
> The RC bug that your request fixes is also still open, which will block
> migration anyway.
>
> Thanks,
>
> --
> Jonathan Wiltshire jmw@debian.org
> Debian Developer http://people.debian.org/~jmw
>
> 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
>
Attachment:
dns-root-data_2017020200.dsc
Description: Binary data
Attachment:
dns-root-data_2017020200.debdiff
Description: Binary data