[BPO] rpki-client/9.0-1 from noble

[Tobias Heider]

[Impact]

rpki-client implements the RPKI standard which is still actively developed and moving fast.
Running a two year old release at this stage doesn't make a whole lot of sense so it would be great
if we could make a version with newer features available for Ubuntu LTS users.

There have been 12 upstream releases since 7.6, a full list of the improvements is available
at https://github.com/rpki-client/rpki-client-portable/blob/master/CHANGELOG#L1-L427.

A summary of the most important ones are:
 * Support for RPKI Signed Prefix Lists
 * Fully conformance with RFC 9286
 * Add ability to constrain an RPKI Trust Anchor's effective signing authority to a limited set
   of Internet numbers
 * Do not apply timezone offsets when converting X509 times (fixes comparison with different time zones)
 * Multiple other RFC compliance improvements

[Scope]

Backport from noble/9.0-1 to jammy

[Other Info]

I am in contact with the upstream developers who support this backport and are available for answering additional questions.

[Tobias Heider (tobhe)]

jammy backport patch is attached or available via git at https://code.launchpad.net/~tobhe/ubuntu/+source/rpki-client/+git/rpki-client/+ref/ubuntu/jammy-backport

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "rpki-jammy.diff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issue please contact him.]

[Tobias Heider (tobhe)]

test build is available at https://launchpad.net/~tobhe/+archive/ubuntu/testing/+packages

[Paride Legovini (paride)]

Some comments:

- [1] says that "any changes required should be explicitly stated in the changelog entry of the backported package". Looks like there are some changes not listed in the changelog.

- Is the sysusers thing a clean revert of 82ce99cec05b4016e019d6a3623e947587a3968e from the Vcs-Git repo? If so I think it's worth mentioning this in d/changelog.

- No need to decrease Standards-Version I believe.

[1] https://wiki.ubuntu.com/UbuntuBackports

[Tobias Heider (tobhe)]

Thanks! Documented both changes and made them clean reverts since that's easier. New diff attached and pushed to git.

[Paride Legovini (paride)]

The d/changelog entry should target jammy-backports and not jammy, for the rest this LGTM.

[Tobias Heider (tobhe)]

Right, new diff attached.

[Paride Legovini (paride)]

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading rpki-client_9.0-1~bpo22.04.1.dsc: done.
  Uploading rpki-client_9.0-1~bpo22.04.1.debian.tar.xz: done.
  Uploading rpki-client_9.0-1~bpo22.04.1_source.buildinfo: done.
  Uploading rpki-client_9.0-1~bpo22.04.1_source.changes: done.
Successfully uploaded packages.

It's now sitting in unapproved. Cheers!