[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#821333: marked as done (snapshot.debian.org: should advertise source-specific [check-valid-until=false] in preference to system-wide flag)

Your message dated Thu, 5 Jan 2017 22:11:25 +0000
with message-id <20170105221125.GK32414@sarek.noreply.org>
and subject line Re: Bug#821333: snapshot.debian.org: should advertise source-specific [check-valid-until=false] in preference to system-wide flag
has caused the Debian Bug report #821333,
regarding snapshot.debian.org: should advertise source-specific [check-valid-until=false] in preference to system-wide flag
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
821333: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=821333
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: snapshot.debian.org
Severity: important

Advertised "-o Acquire::Check-Valid-Until=false" will impact all sources, and using it
just suspends the protection, potentially leaving the user susceptible to attacks.

Using "deb [check-valid-until=false] http://snapshot.debian.org/archive/..."; achieves
the intended purpose, without the big downfall of the old solution.

--- End Message ---
--- Begin Message --- 
On Thu, 05 Jan 2017, Jochen Sprickerhof wrote:

> * Peter Palfrader <weasel@debian.org> [2017-01-05 22:01]:
> > So this only covers stretch and later users.  Can you update your patch
> > with that in mind?
> 
> Sure, attached.

> +<p>
> +If you use at least apt version 1.1.exp9 (stretch and later), you can use this instead:
> +</p>
> +<pre>
> +deb     [check-valid-until=no] <a href="/archive/debian/20091004T111800Z/">http://snapshot.debian.org/archive/debian/20091004T111800Z/</a> lenny main
> +deb-src [check-valid-until=no] <a href="/archive/debian/20091004T111800Z/">http://snapshot.debian.org/archive/debian/20091004T111800Z/</a> lenny main
> +deb     [check-valid-until=no] <a href="/archive/debian-security/20091004T121501Z/">http://snapshot.debian.org/archive/debian-security/20091004T121501Z/</a> lenny/updates main
> +deb-src [check-valid-until=no] <a href="/archive/debian-security/20091004T121501Z/">http://snapshot.debian.org/archive/debian-security/20091004T121501Z/</a> lenny/updates main
> +</pre>

Thanks, merged.
-- 
                            |  .''`.       ** Debian **
      Peter Palfrader       | : :' :      The  universal
 https://www.palfrader.org/ | `. `'      Operating System
                            |   `-    https://www.debian.org/

--- End Message ---
Reply to: