Bug#302223: marked as done (apt 0.6 doesn't complain about missing release file)
Your message dated Thu, 31 Mar 2005 08:47:06 -0800
with message-id <20050331164706.GX9266@alcor.net>
and subject line Bug#302223: apt 0.6 doesn't complain about missing release file
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 30 Mar 2005 18:41:25 +0000
>From agx@sigxcpu.org Wed Mar 30 10:41:25 2005
Return-path: <agx@sigxcpu.org>
Received: from honk1.physik.uni-konstanz.de [134.34.140.224]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DGi84-000893-00; Wed, 30 Mar 2005 10:41:25 -0800
Received: from localhost (localhost.localnet [127.0.0.1])
by honk1.physik.uni-konstanz.de (Postfix) with ESMTP id 38CF52BC41
for <submit@bugs.debian.org>; Wed, 30 Mar 2005 20:41:23 +0200 (CEST)
Received: from honk1.physik.uni-konstanz.de ([127.0.0.1])
by localhost (honk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 03628-31 for <submit@bugs.debian.org>;
Wed, 30 Mar 2005 20:41:19 +0200 (CEST)
Received: from bogon.sigxcpu.org (xdsl-213-196-215-152.netcologne.de [213.196.215.152])
(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
(No client certificate requested)
by honk1.physik.uni-konstanz.de (Postfix) with ESMTP id 7F2AA2BC3E
for <submit@bugs.debian.org>; Wed, 30 Mar 2005 20:41:19 +0200 (CEST)
Received: by bogon.sigxcpu.org (Postfix, from userid 1000)
id C5B9E42A8; Wed, 30 Mar 2005 20:27:21 +0200 (CEST)
Date: Wed, 30 Mar 2005 20:27:21 +0200
From: Guido Guenther <agx@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: apt 0.6 doesn't complain about missing release file
Message-ID: <[🔎] 20050330182721.GA13096@bogon.ms20.nix>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Reportbug-Version: 3.9
User-Agent: Mutt/1.5.8i
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at honk.physik.uni-konstanz.de
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: apt
Version: 0.6
Severity: normal
Tags: wishlist
Hi,
having this URL in my sources list:
deb http://honk.physik.uni-konstanz.de/~agx/linux-sparc/debian/ mplayer/
apt-get doesn't complain about a missing release file. Shouldn't apt-get
issue a warning about missing/unsigned release files?
Cheers,
-- Guido
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: sparc32
---------------------------------------
Received: (at 302223-done) by bugs.debian.org; 31 Mar 2005 16:46:54 +0000
>From mdz@debian.org Thu Mar 31 08:46:54 2005
Return-path: <mdz@debian.org>
Received: from mta13.adelphia.net [68.168.78.44]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DH2on-0003XC-00; Thu, 31 Mar 2005 08:46:54 -0800
Received: from mizar.alcor.net ([68.66.78.251]) by mta13.adelphia.net
(InterMail vM.6.01.04.01 201-2131-118-101-20041129) with ESMTP
id <20050331164619.WVAP4618.mta13.adelphia.net@mizar.alcor.net>;
Thu, 31 Mar 2005 11:46:19 -0500
Received: by mizar.alcor.net (Postfix, from userid 1000)
id 183FE3BF28; Thu, 31 Mar 2005 08:47:06 -0800 (PST)
Date: Thu, 31 Mar 2005 08:47:06 -0800
From: Matt Zimmerman <mdz@debian.org>
To: Guido Guenther <agx@debian.org>
Cc: 302223-done@bugs.debian.org
Subject: Re: Bug#302223: apt 0.6 doesn't complain about missing release file
Message-ID: <20050331164706.GX9266@alcor.net>
References: <[🔎] 20050330182721.GA13096@bogon.ms20.nix> <[🔎] 20050330205112.GE9266@alcor.net> <[🔎] 20050331075022.GA16386@bogon.ms20.nix>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[🔎] 20050331075022.GA16386@bogon.ms20.nix>
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: 302223-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
On Thu, Mar 31, 2005 at 09:50:23AM +0200, Guido Guenther wrote:
> On Wed, Mar 30, 2005 at 12:51:12PM -0800, Matt Zimmerman wrote:
> > Send apt-get update output.
> root@batzen:~# apt-get update
> Ign http://honk.physik.uni-konstanz.de mplayer/ Release.gpg
> Ign http://honk.physik.uni-konstanz.de mplayer/ Release
> Get:1 http://debian.physik.uni-konstanz.de sarge Release.gpg [197B]
> Get:2 http://debian.physik.uni-konstanz.de experimental Release.gpg [197B]
> Get:3 http://debian.physik.uni-konstanz.de unstable Release.gpg [197B]
> Hit http://honk.physik.uni-konstanz.de mplayer/ Packages
> Get:4 http://debian.physik.uni-konstanz.de sarge Release [22.8kB]
> Get:5 http://debian.physik.uni-konstanz.de experimental Release [21.6kB]
> Get:6 http://debian.physik.uni-konstanz.de unstable Release [34.1kB]
> Get:7 http://debian.physik.uni-konstanz.de sarge/main Packages [3151kB]
> Hit http://debian.physik.uni-konstanz.de sarge/non-free Packages
> Get:8 http://debian.physik.uni-konstanz.de sarge/contrib Packages [52.9kB]
> Get:9 http://debian.physik.uni-konstanz.de experimental/main Packages [97.5kB]
> Hit http://debian.physik.uni-konstanz.de experimental/non-free Packages
> Get:10 http://debian.physik.uni-konstanz.de experimental/contrib Packages [4221B]
> Get:11 http://debian.physik.uni-konstanz.de unstable/main Sources [1358kB]
> Fetched 4742kB in 23s (202kB/s)
> Reading Package Lists... Done
>
> See the first two lines. It says that it's ignoring the release file,
> but since it complains about unknown signatures very loudly, shouldn't
> it complain about missing release files too?
Release files have, and will continue to be, optional. Release.gpg is also
optional, regardless of whether Release is present. apt-get asks for
confirmation before installing packages from an unauthenticated source.
I see no bug here.
--
- mdz
Reply to: