Development October 2018

development@lists.ipfire.org

9 participants
29 discussions

[PATCH v2] update ca-certificates CA bundle
by Peter Müller 27 Oct '18

27 Oct '18

Update the CA certificates list to what Mozilla NSS ships currently. The original file can be retrieved from: https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/b… The second version of this patch superseds the first one and bumps the LFS version of ca-certificate, too. Me stupid... Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- config/ca-certificates/certdata.txt | 140 ------------------------------------ lfs/ca-certificates | 2 +- 2 files changed, 1 insertion(+), 141 deletions(-) diff --git a/config/ca-certificates/certdata.txt b/config/ca-certificates/certdata.txt index 193cef38f..61c37a8bd 100644 --- a/config/ca-certificates/certdata.txt +++ b/config/ca-certificates/certdata.txt @@ -2144,146 +2144,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Visa eCommerce Root" -# -# Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Serial Number:13:86:35:4d:1d:3f:06:f2:c1:f9:65:05:d5:90:1c:62 -# Subject: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Not Valid Before: Wed Jun 26 02:18:36 2002 -# Not Valid After : Fri Jun 24 00:16:12 2022 -# Fingerprint (MD5): FC:11:B8:D8:08:93:30:00:6D:23:F9:7E:EB:52:1E:02 -# Fingerprint (SHA1): 70:17:9B:86:8C:00:A4:FA:60:91:52:22:3F:9F:3E:32:BD:E0:05:62 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Visa eCommerce Root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\023\206\065\115\035\077\006\362\301\371\145\005\325\220 -\034\142 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\242\060\202\002\212\240\003\002\001\002\002\020\023 -\206\065\115\035\077\006\362\301\371\145\005\325\220\034\142\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\153 -\061\013\060\011\006\003\125\004\006\023\002\125\123\061\015\060 -\013\006\003\125\004\012\023\004\126\111\123\101\061\057\060\055 -\006\003\125\004\013\023\046\126\151\163\141\040\111\156\164\145 -\162\156\141\164\151\157\156\141\154\040\123\145\162\166\151\143 -\145\040\101\163\163\157\143\151\141\164\151\157\156\061\034\060 -\032\006\003\125\004\003\023\023\126\151\163\141\040\145\103\157 -\155\155\145\162\143\145\040\122\157\157\164\060\036\027\015\060 -\062\060\066\062\066\060\062\061\070\063\066\132\027\015\062\062 -\060\066\062\064\060\060\061\066\061\062\132\060\153\061\013\060 -\011\006\003\125\004\006\023\002\125\123\061\015\060\013\006\003 -\125\004\012\023\004\126\111\123\101\061\057\060\055\006\003\125 -\004\013\023\046\126\151\163\141\040\111\156\164\145\162\156\141 -\164\151\157\156\141\154\040\123\145\162\166\151\143\145\040\101 -\163\163\157\143\151\141\164\151\157\156\061\034\060\032\006\003 -\125\004\003\023\023\126\151\163\141\040\145\103\157\155\155\145 -\162\143\145\040\122\157\157\164\060\202\001\042\060\015\006\011 -\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017\000 -\060\202\001\012\002\202\001\001\000\257\127\336\126\036\156\241 -\332\140\261\224\047\313\027\333\007\077\200\205\117\310\234\266 -\320\364\157\117\317\231\330\341\333\302\110\134\072\254\071\063 -\307\037\152\213\046\075\053\065\365\110\261\221\301\002\116\004 -\226\221\173\260\063\360\261\024\116\021\157\265\100\257\033\105 -\245\112\357\176\266\254\362\240\037\130\077\022\106\140\074\215 -\241\340\175\317\127\076\063\036\373\107\361\252\025\227\007\125 -\146\245\265\055\056\330\200\131\262\247\015\267\106\354\041\143 -\377\065\253\245\002\317\052\364\114\376\173\365\224\135\204\115 -\250\362\140\217\333\016\045\074\237\163\161\317\224\337\112\352 -\333\337\162\070\214\363\226\275\361\027\274\322\272\073\105\132 -\306\247\366\306\027\213\001\235\374\031\250\052\203\026\270\072 -\110\376\116\076\240\253\006\031\351\123\363\200\023\007\355\055 -\277\077\012\074\125\040\071\054\054\000\151\164\225\112\274\040 -\262\251\171\345\030\211\221\250\334\034\115\357\273\176\067\013 -\135\376\071\245\210\122\214\000\154\354\030\174\101\275\366\213 -\165\167\272\140\235\204\347\376\055\002\003\001\000\001\243\102 -\060\100\060\017\006\003\125\035\023\001\001\377\004\005\060\003 -\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003 -\002\001\006\060\035\006\003\125\035\016\004\026\004\024\025\070 -\203\017\077\054\077\160\063\036\315\106\376\007\214\040\340\327 -\303\267\060\015\006\011\052\206\110\206\367\015\001\001\005\005 -\000\003\202\001\001\000\137\361\101\175\174\134\010\271\053\340 -\325\222\107\372\147\134\245\023\303\003\041\233\053\114\211\106 -\317\131\115\311\376\245\100\266\143\315\335\161\050\225\147\021 -\314\044\254\323\104\154\161\256\001\040\153\003\242\217\030\267 -\051\072\175\345\026\140\123\170\074\300\257\025\203\367\217\122 -\063\044\275\144\223\227\356\213\367\333\030\250\155\161\263\367 -\054\027\320\164\045\151\367\376\153\074\224\276\115\113\101\214 -\116\342\163\320\343\220\042\163\103\315\363\357\352\163\316\105 -\212\260\246\111\377\114\175\235\161\210\304\166\035\220\133\035 -\356\375\314\367\356\375\140\245\261\172\026\161\321\026\320\174 -\022\074\154\151\227\333\256\137\071\232\160\057\005\074\031\106 -\004\231\040\066\320\140\156\141\006\273\026\102\214\160\367\060 -\373\340\333\146\243\000\001\275\346\054\332\221\137\240\106\213 -\115\152\234\075\075\335\005\106\376\166\277\240\012\074\344\000 -\346\047\267\377\204\055\336\272\042\047\226\020\161\353\042\355 -\337\337\063\234\317\343\255\256\216\324\216\346\117\121\257\026 -\222\340\134\366\007\017 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for Certificate "Visa eCommerce Root" -# Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Serial Number:13:86:35:4d:1d:3f:06:f2:c1:f9:65:05:d5:90:1c:62 -# Subject: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Not Valid Before: Wed Jun 26 02:18:36 2002 -# Not Valid After : Fri Jun 24 00:16:12 2022 -# Fingerprint (MD5): FC:11:B8:D8:08:93:30:00:6D:23:F9:7E:EB:52:1E:02 -# Fingerprint (SHA1): 70:17:9B:86:8C:00:A4:FA:60:91:52:22:3F:9F:3E:32:BD:E0:05:62 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Visa eCommerce Root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\160\027\233\206\214\000\244\372\140\221\122\042\077\237\076\062 -\275\340\005\142 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\374\021\270\330\010\223\060\000\155\043\371\176\353\122\036\002 -END -CKA_ISSUER MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\023\206\065\115\035\077\006\362\301\371\145\005\325\220 -\034\142 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Certum Root CA" # diff --git a/lfs/ca-certificates b/lfs/ca-certificates index e063b6439..6c684702a 100644 --- a/lfs/ca-certificates +++ b/lfs/ca-certificates @@ -24,7 +24,7 @@ include Config -VER = 20180910 +VER = 20181027 THISAPP = ca-certificates DIR_APP = $(DIR_SRC)/$(THISAPP) -- 2.16.4

1 0

[PATCH] update ca-certificates CA bundle
by Peter Müller 27 Oct '18

27 Oct '18

Update the CA certificates list to what Mozilla NSS ships currently. The original file can be retrieved from: https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/b… Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- config/ca-certificates/certdata.txt | 140 ------------------------------------ 1 file changed, 140 deletions(-) diff --git a/config/ca-certificates/certdata.txt b/config/ca-certificates/certdata.txt index 193cef38f..61c37a8bd 100644 --- a/config/ca-certificates/certdata.txt +++ b/config/ca-certificates/certdata.txt @@ -2144,146 +2144,6 @@ CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE -# -# Certificate "Visa eCommerce Root" -# -# Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Serial Number:13:86:35:4d:1d:3f:06:f2:c1:f9:65:05:d5:90:1c:62 -# Subject: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Not Valid Before: Wed Jun 26 02:18:36 2002 -# Not Valid After : Fri Jun 24 00:16:12 2022 -# Fingerprint (MD5): FC:11:B8:D8:08:93:30:00:6D:23:F9:7E:EB:52:1E:02 -# Fingerprint (SHA1): 70:17:9B:86:8C:00:A4:FA:60:91:52:22:3F:9F:3E:32:BD:E0:05:62 -CKA_CLASS CK_OBJECT_CLASS CKO_CERTIFICATE -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Visa eCommerce Root" -CKA_CERTIFICATE_TYPE CK_CERTIFICATE_TYPE CKC_X_509 -CKA_SUBJECT MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_ID UTF8 "0" -CKA_ISSUER MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\023\206\065\115\035\077\006\362\301\371\145\005\325\220 -\034\142 -END -CKA_VALUE MULTILINE_OCTAL -\060\202\003\242\060\202\002\212\240\003\002\001\002\002\020\023 -\206\065\115\035\077\006\362\301\371\145\005\325\220\034\142\060 -\015\006\011\052\206\110\206\367\015\001\001\005\005\000\060\153 -\061\013\060\011\006\003\125\004\006\023\002\125\123\061\015\060 -\013\006\003\125\004\012\023\004\126\111\123\101\061\057\060\055 -\006\003\125\004\013\023\046\126\151\163\141\040\111\156\164\145 -\162\156\141\164\151\157\156\141\154\040\123\145\162\166\151\143 -\145\040\101\163\163\157\143\151\141\164\151\157\156\061\034\060 -\032\006\003\125\004\003\023\023\126\151\163\141\040\145\103\157 -\155\155\145\162\143\145\040\122\157\157\164\060\036\027\015\060 -\062\060\066\062\066\060\062\061\070\063\066\132\027\015\062\062 -\060\066\062\064\060\060\061\066\061\062\132\060\153\061\013\060 -\011\006\003\125\004\006\023\002\125\123\061\015\060\013\006\003 -\125\004\012\023\004\126\111\123\101\061\057\060\055\006\003\125 -\004\013\023\046\126\151\163\141\040\111\156\164\145\162\156\141 -\164\151\157\156\141\154\040\123\145\162\166\151\143\145\040\101 -\163\163\157\143\151\141\164\151\157\156\061\034\060\032\006\003 -\125\004\003\023\023\126\151\163\141\040\145\103\157\155\155\145 -\162\143\145\040\122\157\157\164\060\202\001\042\060\015\006\011 -\052\206\110\206\367\015\001\001\001\005\000\003\202\001\017\000 -\060\202\001\012\002\202\001\001\000\257\127\336\126\036\156\241 -\332\140\261\224\047\313\027\333\007\077\200\205\117\310\234\266 -\320\364\157\117\317\231\330\341\333\302\110\134\072\254\071\063 -\307\037\152\213\046\075\053\065\365\110\261\221\301\002\116\004 -\226\221\173\260\063\360\261\024\116\021\157\265\100\257\033\105 -\245\112\357\176\266\254\362\240\037\130\077\022\106\140\074\215 -\241\340\175\317\127\076\063\036\373\107\361\252\025\227\007\125 -\146\245\265\055\056\330\200\131\262\247\015\267\106\354\041\143 -\377\065\253\245\002\317\052\364\114\376\173\365\224\135\204\115 -\250\362\140\217\333\016\045\074\237\163\161\317\224\337\112\352 -\333\337\162\070\214\363\226\275\361\027\274\322\272\073\105\132 -\306\247\366\306\027\213\001\235\374\031\250\052\203\026\270\072 -\110\376\116\076\240\253\006\031\351\123\363\200\023\007\355\055 -\277\077\012\074\125\040\071\054\054\000\151\164\225\112\274\040 -\262\251\171\345\030\211\221\250\334\034\115\357\273\176\067\013 -\135\376\071\245\210\122\214\000\154\354\030\174\101\275\366\213 -\165\167\272\140\235\204\347\376\055\002\003\001\000\001\243\102 -\060\100\060\017\006\003\125\035\023\001\001\377\004\005\060\003 -\001\001\377\060\016\006\003\125\035\017\001\001\377\004\004\003 -\002\001\006\060\035\006\003\125\035\016\004\026\004\024\025\070 -\203\017\077\054\077\160\063\036\315\106\376\007\214\040\340\327 -\303\267\060\015\006\011\052\206\110\206\367\015\001\001\005\005 -\000\003\202\001\001\000\137\361\101\175\174\134\010\271\053\340 -\325\222\107\372\147\134\245\023\303\003\041\233\053\114\211\106 -\317\131\115\311\376\245\100\266\143\315\335\161\050\225\147\021 -\314\044\254\323\104\154\161\256\001\040\153\003\242\217\030\267 -\051\072\175\345\026\140\123\170\074\300\257\025\203\367\217\122 -\063\044\275\144\223\227\356\213\367\333\030\250\155\161\263\367 -\054\027\320\164\045\151\367\376\153\074\224\276\115\113\101\214 -\116\342\163\320\343\220\042\163\103\315\363\357\352\163\316\105 -\212\260\246\111\377\114\175\235\161\210\304\166\035\220\133\035 -\356\375\314\367\356\375\140\245\261\172\026\161\321\026\320\174 -\022\074\154\151\227\333\256\137\071\232\160\057\005\074\031\106 -\004\231\040\066\320\140\156\141\006\273\026\102\214\160\367\060 -\373\340\333\146\243\000\001\275\346\054\332\221\137\240\106\213 -\115\152\234\075\075\335\005\106\376\166\277\240\012\074\344\000 -\346\047\267\377\204\055\336\272\042\047\226\020\161\353\042\355 -\337\337\063\234\317\343\255\256\216\324\216\346\117\121\257\026 -\222\340\134\366\007\017 -END -CKA_NSS_MOZILLA_CA_POLICY CK_BBOOL CK_TRUE - -# Trust for Certificate "Visa eCommerce Root" -# Issuer: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Serial Number:13:86:35:4d:1d:3f:06:f2:c1:f9:65:05:d5:90:1c:62 -# Subject: CN=Visa eCommerce Root,OU=Visa International Service Association,O=VISA,C=US -# Not Valid Before: Wed Jun 26 02:18:36 2002 -# Not Valid After : Fri Jun 24 00:16:12 2022 -# Fingerprint (MD5): FC:11:B8:D8:08:93:30:00:6D:23:F9:7E:EB:52:1E:02 -# Fingerprint (SHA1): 70:17:9B:86:8C:00:A4:FA:60:91:52:22:3F:9F:3E:32:BD:E0:05:62 -CKA_CLASS CK_OBJECT_CLASS CKO_NSS_TRUST -CKA_TOKEN CK_BBOOL CK_TRUE -CKA_PRIVATE CK_BBOOL CK_FALSE -CKA_MODIFIABLE CK_BBOOL CK_FALSE -CKA_LABEL UTF8 "Visa eCommerce Root" -CKA_CERT_SHA1_HASH MULTILINE_OCTAL -\160\027\233\206\214\000\244\372\140\221\122\042\077\237\076\062 -\275\340\005\142 -END -CKA_CERT_MD5_HASH MULTILINE_OCTAL -\374\021\270\330\010\223\060\000\155\043\371\176\353\122\036\002 -END -CKA_ISSUER MULTILINE_OCTAL -\060\153\061\013\060\011\006\003\125\004\006\023\002\125\123\061 -\015\060\013\006\003\125\004\012\023\004\126\111\123\101\061\057 -\060\055\006\003\125\004\013\023\046\126\151\163\141\040\111\156 -\164\145\162\156\141\164\151\157\156\141\154\040\123\145\162\166 -\151\143\145\040\101\163\163\157\143\151\141\164\151\157\156\061 -\034\060\032\006\003\125\004\003\023\023\126\151\163\141\040\145 -\103\157\155\155\145\162\143\145\040\122\157\157\164 -END -CKA_SERIAL_NUMBER MULTILINE_OCTAL -\002\020\023\206\065\115\035\077\006\362\301\371\145\005\325\220 -\034\142 -END -CKA_TRUST_SERVER_AUTH CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_EMAIL_PROTECTION CK_TRUST CKT_NSS_TRUSTED_DELEGATOR -CKA_TRUST_CODE_SIGNING CK_TRUST CKT_NSS_MUST_VERIFY_TRUST -CKA_TRUST_STEP_UP_APPROVED CK_BBOOL CK_FALSE - # # Certificate "Certum Root CA" # -- 2.16.4

1 0

[PATCH 1/2] Pakfire: abort download if downloaded size is emtpy or zero
by Peter Müller 22 Oct '18

22 Oct '18

In case a download fails for whatever reason, and the downloaded file size cannot be determined or is zero, Pakfire should abort. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- src/pakfire/lib/functions.pl | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/pakfire/lib/functions.pl b/src/pakfire/lib/functions.pl index 12a405bd7..bbc580ad2 100644 --- a/src/pakfire/lib/functions.pl +++ b/src/pakfire/lib/functions.pl @@ -180,7 +180,14 @@ sub fetchfile { my $result = $ua->head($url); my $remote_headers = $result->headers; $total_size = $remote_headers->content_length; - logger("DOWNLOAD INFO: $file has size of $total_size bytes"); + + # validate if file download was successful (size <= 0) + if ( $total_size eq "0" || not $total_size ) { + logger("DOWNLOAD ERROR: download of $file failed with size '$total_size' bytes"); + return 1; + } else { + logger("DOWNLOAD INFO: $file has size of $total_size bytes"); + } my $response = $ua->get($url, ':content_cb' => \&callback ); message(""); -- 2.16.4

1 1

[PATCH 1/5] python-setuputils: Update to 40.4.3
by Stefan Schantl 21 Oct '18

21 Oct '18

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- python-setuptools/python-setuptools.nm | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/python-setuptools/python-setuptools.nm b/python-setuptools/python-setuptools.nm index 8f1823aea..ffef974cf 100644 --- a/python-setuptools/python-setuptools.nm +++ b/python-setuptools/python-setuptools.nm @@ -4,7 +4,7 @@ ############################################################################### name = python-setuptools -version = 28.2.0 +version = 40.4.3 release = 1 arch = noarch thisapp = setuptools-%{version} @@ -21,6 +21,8 @@ description especially ones that have dependencies on other packages. end +source_dl = https://github.com/pypa/setuptools/archive/v%{version}.tar.gz#/ + build requires pakfire-builder >= 0.9.23-2 @@ -36,9 +38,11 @@ build build pushd %{DIR_APP3} + %{python3} bootstrap.py CFLAGS="%{CFLAGS}" %{python3} setup.py build popd + %{python} bootstrap.py CFLAGS="%{CFLAGS}" %{python} setup.py build end -- 2.17.1

2 5

[PATCH 1/4] python-lxml: Update to 4.2.5
by Stefan Schantl 21 Oct '18

21 Oct '18

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- python-lxml/python-lxml.nm | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/python-lxml/python-lxml.nm b/python-lxml/python-lxml.nm index 82c07c57a..94938c027 100644 --- a/python-lxml/python-lxml.nm +++ b/python-lxml/python-lxml.nm @@ -4,7 +4,7 @@ ############################################################################### name = python-lxml -version = 3.4.4 +version = 4.2.5 release = 1 thisapp = lxml-%{version} @@ -43,11 +43,6 @@ build # Run tests. %{python3} test.py -p -v - - # Launch more tests. - export PYTHONPATH=src - %{python3} selftest.py - %{python3} selftest2.py end install -- 2.17.1

1 3

Core124 - remastering ISO seems to fail.
by Paul Titjen 21 Oct '18

21 Oct '18

Dear all, The remastering option of the backup seems to fail again for me at least in core124. It was working in core123. Now I am getting a remastered ISO 0f 0 size. Looking at the backups created everything else seems to work except the remastering part. Backup from 20181016-0742.ipf Size 11.46 MB Backup from 20181016-0744.ipf Size 13.22 MB Backup from 20181016-0804.ipf Size 13.22 MB Backup from ipfire-2.21.x86_64-full-core124-20181016-0744.iso Size 0.00 MB Backup from ipfire-2.21.x86_64-full-core124-20181016-0804.iso Size 0.00 MB Backup from ipfire-2.21.x86_64-full-core124.iso Size 240.00 MB To have a look at it I used command line and change directory to /var/ipfire/backup/bin and run ./backup.pl iso This is the tail end of the output from ./backup.pl iso ~~~~~~~~~~~~~~ Remastering iso mount: /dev/loop0 is write-protected, mounting read-only Running mkisofs I: -input-charset not specified, using utf-8 (detected in locale settings) genisoimage: No such file or directory. Invalid node - 'backup'. isohybrid: ipfire-2.21.x86_64-full-core124-20181016-0804.iso: read error - 0: Success Cleaning up ^C ~~~~~~~~~~~~~~ The CTRL C is because the script hangs trying to clean up. Below is the end of the script that is called - /usr/local/bin/backupiso ~~~~~~~~~~~~~~~~~ echo "Remastering iso" mkdir -p backupiso.tmp.${TS} mount -o loop ${ISO} backupiso.tmp.${TS} cp -pr backupiso.tmp.${TS} backupiso.${TS} umount backupiso.tmp.${TS} rm -r backupiso.tmp.${TS} # Copy backup file to disk cp "/var/ipfire/backup/${TS}.ipf" "backupiso.${TS}/backup.ipf" echo "Running mkisofs" makeiso backupiso.${TS} $(basename ${ISO} .iso)-${TS}.iso echo "Cleaning up" rm -rf backupiso.${TS} ~~~~~~~~~~~~~~~~~~ Regards, Paul

2 1

RE: Core124 - remastering ISO seems to fail.
by Paul Titjen 21 Oct '18

21 Oct '18

Dear Jose,That fixes it perfectly. Core124 is working very nicely and it was only that backup iso that was failing for me.Many thanks for this fix..RegardsPaulPaul Titjen -------- Original message -------- From: Jose Dias <jose.dias(a)diaslan.com> Date: 20/10/2018 16:13 (GMT+00:00) To: 'Paul Titjen' <paul.titjen(a)ministc.com>, development(a)lists.ipfire.org Subject: RE: Core124 - remastering ISO seems to fail. What you saw was a bad run. At some point in the recent past /usr/local/bin/backupiso broke. The spaces in the title of the ISO (-V below) had more spaces than the shell could cope with. I added a -r to the mount command to eliminate an error message. I had a “set -vx” in the code that showed me the problem but that’s not strictly required to run normally Here’s my fix:[root@harold bin]# diff -p backupiso.github backupiso*** backupiso.github 2018-10-20 08:36:40.788851707 -0400--- backupiso 2018-10-20 11:06:19.190237170 -0400*************** makeiso() {*** 5,11 **** local dir="${1}" local output="${2}" ! local args="-J -r -V 'ipfire backup ${TS}' \ -b boot/isolinux/isolinux.bin -no-emul-boot -boot-load-size 4 -boot-info-table \ -c boot/isolinux/boot.catalog" --- 5,12 ---- local dir="${1}" local output="${2}" ! #local args="-J -r -V 'ipfire backup ${TS}'! local args="-J -r \ -b boot/isolinux/isolinux.bin -no-emul-boot -boot-load-size 4 -boot-info-table \ -c boot/isolinux/boot.catalog" *************** makeiso() {*** 15,21 **** fi # Compose ISO! mkisofs ${args} ${dir} > ${output} # Add DOS paritition table if [ -e "${dir}/boot/isolinux/efiboot.img" ]; then--- 16,22 ---- fi # Compose ISO! mkisofs -V 'ipfire backup ${TS}' ${args} ${dir} > ${output} # Add DOS paritition table if [ -e "${dir}/boot/isolinux/efiboot.img" ]; then*************** rm ${ISO}.md5*** 90,96 **** echo "Remastering iso" mkdir -p backupiso.tmp.${TS}! mount -o loop ${ISO} backupiso.tmp.${TS} cp -pr backupiso.tmp.${TS} backupiso.${TS} umount backupiso.tmp.${TS} rm -r backupiso.tmp.${TS}--- 91,98 ---- echo "Remastering iso" mkdir -p backupiso.tmp.${TS}! mount -r -o loop ${ISO} backupiso.tmp.${TS}! cp -pr backupiso.tmp.${TS} backupiso.${TS} umount backupiso.tmp.${TS} rm -r backupiso.tmp.${TS} Here’s my run after the fix. makeiso backupiso.${TS} $(basename ${ISO} .iso)-${TS}.isobasename ${ISO} .iso++ basename ipfire-2.21.i586-full-core124.iso .iso+ makeiso backupiso.20181020-1024 ipfire-2.21.i586-full-core124-20181020-1024.iso+ local dir=backupiso.20181020-1024+ local output=ipfire-2.21.i586-full-core124-20181020-1024.iso+ local 'args=-J -r -b boot/isolinux/isolinux.bin -no-emul-boot -boot-load-size 4 -boot-info-table -c boot/isolinux/boot.catalog'+ '[' -e backupiso.20181020-1024/boot/isolinux/efiboot.img ']'+ mkisofs -V 'ipfire backup ${TS}' -J -r -b boot/isolinux/isolinux.bin -no-emul-boot -boot-load-size 4 -boot-info-table -c boot/isolinux/boot.catalog backupiso.20181020-1024I: -input-charset not specified, using utf-8 (detected in locale settings)Size of boot image is 4 sectors -> No emulation 1.34% done, estimate finish Sat Oct 20 10:36:28 2018 2.67% done, estimate finish Sat Oct 20 10:36:28 2018…96.05% done, estimate finish Sat Oct 20 10:36:47 2018 97.39% done, estimate finish Sat Oct 20 10:36:47 2018 98.72% done, estimate finish Sat Oct 20 10:36:48 2018Total translation table size: 2048Total rockridge attributes bytes: 7102Total directory bytes: 14336Path table size(bytes): 50Max brk space used 42000374803 extents written (732 MB)+ '[' -e backupiso.20181020-1024/boot/isolinux/efiboot.img ']'+ isohybrid ipfire-2.21.i586-full-core124-20181020-1024.iso+ return 0 echo "Cleaning up"+ echo 'Cleaning up'Cleaning uprm -rf backupiso.${TS} From: Development <development-bounces(a)lists.ipfire.org> On Behalf Of Paul TitjenSent: Tuesday, October 16, 2018 3:47 AMTo: development(a)lists.ipfire.orgSubject: Core124 - remastering ISO seems to fail. Dear all, The remastering option of the backup seems to fail again for me at least in core124. It was working in core123. Now I am getting a remastered ISO 0f 0 size.Looking at the backups created everything else seems to work except the remastering part. Backup from 20181016-0742.ipf Size 11.46 MB Backup from 20181016-0744.ipf Size 13.22 MB Backup from 20181016-0804.ipf Size 13.22 MB Backup from ipfire-2.21.x86_64-full-core124-20181016-0744.iso Size 0.00 MB Backup from ipfire-2.21.x86_64-full-core124-20181016-0804.iso Size 0.00 MB Backup from ipfire-2.21.x86_64-full-core124.iso Size 240.00 MB To have a look at it I used command line and change directory to /var/ipfire/backup/bin and run ./backup.pl isoThis is the tail end of the output from ./backup.pl iso~~~~~~~~~~~~~~Remastering isomount: /dev/loop0 is write-protected, mounting read-onlyRunning mkisofsI: -input-charset not specified, using utf-8 (detected in locale settings)genisoimage: No such file or directory. Invalid node - 'backup'.isohybrid: ipfire-2.21.x86_64-full-core124-20181016-0804.iso: read error - 0: SuccessCleaning up^C~~~~~~~~~~~~~~ The CTRL C is because the script hangs trying to clean up. Below is the end of the script that is called - /usr/local/bin/backupiso~~~~~~~~~~~~~~~~~echo "Remastering iso"mkdir -p backupiso.tmp.${TS}mount -o loop ${ISO} backupiso.tmp.${TS}cp -pr backupiso.tmp.${TS} backupiso.${TS}umount backupiso.tmp.${TS}rm -r backupiso.tmp.${TS} # Copy backup file to diskcp "/var/ipfire/backup/${TS}.ipf" "backupiso.${TS}/backup.ipf" echo "Running mkisofs"makeiso backupiso.${TS} $(basename ${ISO} .iso)-${TS}.iso echo "Cleaning up"rm -rf backupiso.${TS}~~~~~~~~~~~~~~~~~~ Regards,Paul Virus-free. www.avast.com

1 0

[PATCH] fix download routines in Pakfire if behind upstream proxy
by Peter Müller 19 Oct '18

19 Oct '18

Using an array for setting both HTTP and HTTPS proxy settings in functions.pl does not seem to work, the queries are still transferred directly. Setting proxies with two code lines is boilerplate-style, but works much more robust. Returned file size is now checked against values indicating download errors (0 or empty), avoiding successful returns after failed downloads. Partially fixes #11900 Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- src/pakfire/lib/functions.pl | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/src/pakfire/lib/functions.pl b/src/pakfire/lib/functions.pl index 12a405bd7..291a111b9 100644 --- a/src/pakfire/lib/functions.pl +++ b/src/pakfire/lib/functions.pl @@ -157,10 +157,12 @@ sub fetchfile { if ($proxysettings{'UPSTREAM_PROXY'}) { logger("DOWNLOAD INFO: Upstream proxy: \"$proxysettings{'UPSTREAM_PROXY'}\""); if ($proxysettings{'UPSTREAM_USER'}) { - $ua->proxy([["http", "https"] => "http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}@"."$proxysettings{'UPSTREAM_PROXY'}/"]); + $ua->proxy("http" => "http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}\@$proxysettings{'UPSTREAM_PROXY'}/"); + $ua->proxy("https" => "http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}\@$proxysettings{'UPSTREAM_PROXY'}/"); logger("DOWNLOAD INFO: Logging in with: \"$proxysettings{'UPSTREAM_USER'}\" - \"$proxysettings{'UPSTREAM_PASSWORD'}\""); } else { - $ua->proxy([["http", "https"] => "http://$proxysettings{'UPSTREAM_PROXY'}/"]); + $ua->proxy("http" => "http://$proxysettings{'UPSTREAM_PROXY'}/"); + $ua->proxy("https" => "http://$proxysettings{'UPSTREAM_PROXY'}/"); } } @@ -180,7 +182,14 @@ sub fetchfile { my $result = $ua->head($url); my $remote_headers = $result->headers; $total_size = $remote_headers->content_length; - logger("DOWNLOAD INFO: $file has size of $total_size bytes"); + + # validate if file download was successful (size <= 0) + if ( $total_size eq "0" || not $total_size ) { + logger("DOWNLOAD ERROR: download of $file failed with size '$total_size' bytes"); + return 1; + } else { + logger("DOWNLOAD INFO: $file has size of $total_size bytes"); + } my $response = $ua->get($url, ':content_cb' => \&callback ); message(""); -- 2.16.4

2 1

Taking a few days off
by Matthias Fischer 13 Oct '18

13 Oct '18

Hi list, just for the records... We're taking a few days off. If anyone needs us: we can be found on this bench from time to time...: ;-)) https://www.utersum.de/webcambilder/webcam1.jpg I still got some updates in the pipeline. If anyone wants to test, please let me know, then I'll try to upload these today. httpd => 2.4.35 [running here] mc => 4.8.21 [running here] snort => 2.9.12 [running here since yesterday] gnutls => 3.5.19 [not tested yet] And - I'm still updating 'Cleaning the lang files' with each Core update: https://patchwork.ipfire.org/patch/1605/ https://patchwork.ipfire.org/patch/1604/ https://patchwork.ipfire.org/patch/1607/ https://patchwork.ipfire.org/patch/1606/ [Anyone interested!? ;-)] Keep your heads up - see you end of month... Best, Matthias

1 0

[PATCH] unbound: Update to 1.8.1
by Matthias Fischer 09 Oct '18

09 Oct '18

For details see: https://nlnetlabs.nl/projects/unbound/download/ Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 9f7c512db..2232c6889 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.0.0 +usr/lib/libunbound.so.8.0.1 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index ae2795e0e..8dfcfa3a0 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.8.0 +VER = 1.8.1 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 495ffdff55a53ff1735fb58e956c1945 +$(DL_FILE)_MD5 = 00ce66e357fd2f969acf69008aa82a40 install : $(TARGET) -- 2.18.0

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2018