Debian Bug report logs - #1077935
src:gnutls28: <!nocheck> Build-Depends on datefudge which FTBFS and is removed from testing

Reply or subscribe to this bug.

Display info messages

Message #5 received at [email protected] (full text, mbox, reply):

From: Paul Gevers <[email protected]>

To: [email protected]

Subject: src:gnutls28: <!nocheck> Build-Depends on datefudge which FTBFS and is removed from testing

Date: Sun, 4 Aug 2024 21:08:59 +0200

[Message part 1 (text/plain, inline)]

Source: gnutls28
Version: 3.8.6-2
Severity: important
Tags: sid trixie
User: [email protected]
Usertags: edos-uninstallable

Dear maintainer(s),

gnutls28 has a <!nocheck> build dependency on datefudge, but since April 
2024 datefudge has an RC bug because if FTBFS. There is no activity on 
that bug report and datefudge has been removed from testing.

I rebuild gnutls28 twice, as-is and with datefudge removed from the 
build dependencies, and used diffoscope to check that the binaries 
remain the same. So, it's possible to drop the dependency without too 
much impact (I assume some tests will be skipped). Can you please help 
the maintainer of datefudge to fix it or drop the dependency until 
datefudge is fixed?

I have rated this bug as severity important for now because technically 
gnutls28 now FTBFS in testing, but it's trivial to work around and it's 
the result of a balancing act described at [1]. When we get closer to 
the freeze, this issue will become RC.

Paul

[1] https://release.debian.org/key-packages.html

[OpenPGP_signature.asc (application/pgp-signature, attachment)]

Message #10 received at [email protected] (full text, mbox, reply):

From: Andreas Metzler <[email protected]>

To: Paul Gevers <[email protected]>, [email protected]

Subject: Re: Bug#1077935: src:gnutls28: <!nocheck> Build-Depends on datefudge which FTBFS and is removed from testing

Date: Sun, 11 Aug 2024 16:52:20 +0200

On 2024-08-04 Paul Gevers <[email protected]> wrote:
> Source: gnutls28
> Version: 3.8.6-2
> Severity: important
> Tags: sid trixie
> User: [email protected]
> Usertags: edos-uninstallable

> Dear maintainer(s),

> gnutls28 has a <!nocheck> build dependency on datefudge, but since April
> 2024 datefudge has an RC bug because if FTBFS. There is no activity on that
> bug report and datefudge has been removed from testing.

> I rebuild gnutls28 twice, as-is and with datefudge removed from the build
> dependencies, and used diffoscope to check that the binaries remain the
> same. So, it's possible to drop the dependency without too much impact (I
> assume some tests will be skipped). Can you please help the maintainer of
> datefudge to fix it or drop the dependency until datefudge is fixed?

> I have rated this bug as severity important for now because technically
> gnutls28 now FTBFS in testing, but it's trivial to work around and it's the
> result of a balancing act described at [1]. When we get closer to the
> freeze, this issue will become RC.
[...]

Hello Paul,

yes, the only impact of dropping the datefudge dep is a loss of test
and autopkgtest coverage.

However since the gnutls commandline programs were enhanced to also
support --attime option (similar to OpenSSL' -attime) the usage of
datefudge has decreased, I am quite sure we will able to drop the b-d in
time. Please do not hesitate to ping me if it is necessary to drop the
dep immediately.

cu Andreas

Message #15 received at [email protected] (full text, mbox, reply):

From: Paul Gevers <[email protected]>

To: [email protected]

Subject: Re: Bug#1077935: src:gnutls28: <!nocheck> Build-Depends on datefudge which FTBFS and is removed from testing

Date: Sun, 11 Aug 2024 17:03:34 +0200

[Message part 1 (text/plain, inline)]

Hi Andreas,

On 11-08-2024 16:52, Andreas Metzler wrote:
> yes, the only impact of dropping the datefudge dep is a loss of test
> and autopkgtest coverage.

Ack.

> However since the gnutls commandline programs were enhanced to also
> support --attime option (similar to OpenSSL' -attime) the usage of
> datefudge has decreased, I am quite sure we will able to drop the b-d in
> time. Please do not hesitate to ping me if it is necessary to drop the
> dep immediately.

We're not in a hurry. But assuming datefudge will not get fixed, we need 
to do this before we release trixie.

Paul

[OpenPGP_signature.asc (application/pgp-signature, attachment)]

Message #20 received at [email protected] (full text, mbox, reply):

From: Debian FTP Masters <[email protected]>

To: [email protected]

Subject: Bug#1077935: fixed in gnutls28 3.8.7.1-1

Date: Thu, 15 Aug 2024 16:21:02 +0000

[Message part 1 (text/plain, inline)]

Source: gnutls28
Source-Version: 3.8.7.1-1
Done: Andreas Metzler <[email protected]>

We believe that the bug you reported is fixed in the latest version of
gnutls28, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated gnutls28 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Aug 2024 16:40:32 +0200
Source: gnutls28
Architecture: source
Version: 3.8.7.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian GnuTLS Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Closes: 1031553 1077935
Changes:
 gnutls28 (3.8.7.1-1) experimental; urgency=medium
 .
   [ Daniel Kahn Gillmor ]
   * Refresh upstream signing keys.
 .
   [ Andreas Metzler ]
   * New upstream version.
     + Update copyright info.
     + Drop now unneeded datefudge build- and autopkgtest-dep.
       Closes: #1077935, #1031553
   * 51-Also-set-ENABLE_DSA-for-tests-in-cert-tests-subdirec.patch: Do not skip
     all DSA tests in cert-tests subdirectory. Also set ENABLE_DSA=1 in
     autopkgtest.
   * 52_revert-back-to-datefudge-for-openssl-ocsp.patch: Skip some
     ocsp test instead of fixing them and requiring datefudge.
Checksums-Sha1: 
 d6901a945d79831915f0ee30ba400e7fcef7aea0 3256 gnutls28_3.8.7.1-1.dsc
 d66729d963c7a5fb170e4b3afeb63702a9ccd265 6695404 gnutls28_3.8.7.1.orig.tar.xz
 8234ed8787cb29fef9a29ec8148aa09cba407ea0 854 gnutls28_3.8.7.1.orig.tar.xz.asc
 d702fec15c2e76144f112c1c9442849d0d9b2a17 78828 gnutls28_3.8.7.1-1.debian.tar.xz
Checksums-Sha256: 
 4094e62394ff8401fe5bc42c8b23c63b4375c478dbf43d39eece8bfeba8d83cd 3256 gnutls28_3.8.7.1-1.dsc
 9ca0ddaccce28a74fa18d738744190afb3b0daebef74e6ad686bf7bef99abd60 6695404 gnutls28_3.8.7.1.orig.tar.xz
 13bd7722eb89f921a0621b80f6e67edb1659b54158b0259877794cf8c3dda7d8 854 gnutls28_3.8.7.1.orig.tar.xz.asc
 331ad5b8448aee1bf3e893c5b9fbc4612d21b12ae408d6c91098d6a400f4a1dc 78828 gnutls28_3.8.7.1-1.debian.tar.xz
Files: 
 f85f3eaac6d9a626bfe2612b19d0cac1 3256 libs optional gnutls28_3.8.7.1-1.dsc
 46777802233eb7203d47a8b8880c8c90 6695404 libs optional gnutls28_3.8.7.1.orig.tar.xz
 ed4fe0dccde290c559efa0e2a200c692 854 libs optional gnutls28_3.8.7.1.orig.tar.xz.asc
 67e9c5392bc733713c9542d0b9ca4fa5 78828 libs optional gnutls28_3.8.7.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=vhjd
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.