| 2018-12-05 22:04:42 |
Mauricio Faria de Oliveira |
bug |
|
|
added bug |
| 2018-12-05 22:08:11 |
Mauricio Faria de Oliveira |
description |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu archive despite being available for
download in Launchpad with a link for some reason
(perhaps a problem during import from Debian/sid?)
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The older releases (Trusty, Xenial) are affected,
but not requested for, and would need more work,
as the udeb is not yet in the packaging but that
is doable if required for the process.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6 |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu archive despite being available for
download in Launchpad with a link for some reason
(perhaps a problem during import from Debian/sid?)
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The older releases (Trusty, Xenial) are affected,
but not requested for, and would need more work,
as the udeb is not yet in the packaging but that
is doable if required for the process.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging/reference purposes, one can install strace-udeb in the intaller to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
|
| 2018-12-05 22:08:38 |
Mauricio Faria de Oliveira |
description |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu archive despite being available for
download in Launchpad with a link for some reason
(perhaps a problem during import from Debian/sid?)
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The older releases (Trusty, Xenial) are affected,
but not requested for, and would need more work,
as the udeb is not yet in the packaging but that
is doable if required for the process.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging/reference purposes, one can install strace-udeb in the intaller to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu archive despite being available for
download in Launchpad with a link for some reason
(perhaps a problem during import from Debian/sid?)
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The older releases (Trusty, Xenial) are affected,
but not requested for, and would need more work,
as the udeb is not yet in the packaging but that
is doable if required for the process.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging purposes, one can install strace-udeb in the installer to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
|
| 2018-12-05 22:12:21 |
Mauricio Faria de Oliveira |
attachment added |
|
ca-certificates_disco.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219559/+files/ca-certificates_disco.debdiff |
|
| 2018-12-05 22:12:44 |
Mauricio Faria de Oliveira |
attachment added |
|
ca-certificates_cosmic.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219560/+files/ca-certificates_cosmic.debdiff |
|
| 2018-12-05 22:13:02 |
Mauricio Faria de Oliveira |
attachment added |
|
ca-certificates_bionic.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219561/+files/ca-certificates_bionic.debdiff |
|
| 2018-12-05 22:13:21 |
Mauricio Faria de Oliveira |
attachment added |
|
d-i_disco.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219562/+files/d-i_disco.debdiff |
|
| 2018-12-05 22:13:37 |
Mauricio Faria de Oliveira |
attachment added |
|
d-i_cosmic.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219563/+files/d-i_cosmic.debdiff |
|
| 2018-12-05 22:13:56 |
Mauricio Faria de Oliveira |
attachment added |
|
d-i_bionic.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5219564/+files/d-i_bionic.debdiff |
|
| 2018-12-05 22:14:09 |
Mauricio Faria de Oliveira |
debian-installer (Ubuntu): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-05 22:16:06 |
Mauricio Faria de Oliveira |
bug |
|
|
added subscriber STS Sponsors |
| 2018-12-06 00:21:49 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
| 2018-12-06 00:21:57 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Sponsors Team |
| 2018-12-06 12:30:26 |
Dan Streetman |
tags |
patch |
patch sts sts-sponsor sts-sponsor-ddstreet |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
nominated for series |
|
Ubuntu Trusty |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
bug task added |
|
debian-installer (Ubuntu Trusty) |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
nominated for series |
|
Ubuntu Disco |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
bug task added |
|
debian-installer (Ubuntu Disco) |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
nominated for series |
|
Ubuntu Cosmic |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
bug task added |
|
debian-installer (Ubuntu Cosmic) |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
nominated for series |
|
Ubuntu Xenial |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
bug task added |
|
debian-installer (Ubuntu Xenial) |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
nominated for series |
|
Ubuntu Bionic |
|
| 2018-12-06 13:09:58 |
Dan Streetman |
bug task added |
|
debian-installer (Ubuntu Bionic) |
|
| 2018-12-06 13:10:11 |
Dan Streetman |
debian-installer (Ubuntu Disco): status |
New |
In Progress |
|
| 2018-12-06 13:10:13 |
Dan Streetman |
debian-installer (Ubuntu Cosmic): status |
New |
In Progress |
|
| 2018-12-06 13:10:14 |
Dan Streetman |
debian-installer (Ubuntu Bionic): status |
New |
In Progress |
|
| 2018-12-06 13:10:18 |
Dan Streetman |
debian-installer (Ubuntu Xenial): status |
New |
In Progress |
|
| 2018-12-06 13:11:01 |
Dan Streetman |
debian-installer (Ubuntu Xenial): status |
In Progress |
New |
|
| 2018-12-06 13:11:06 |
Dan Streetman |
debian-installer (Ubuntu Disco): importance |
Undecided |
Medium |
|
| 2018-12-06 13:11:07 |
Dan Streetman |
debian-installer (Ubuntu Cosmic): importance |
Undecided |
Medium |
|
| 2018-12-06 13:11:09 |
Dan Streetman |
debian-installer (Ubuntu Bionic): importance |
Undecided |
Medium |
|
| 2018-12-06 13:11:10 |
Dan Streetman |
debian-installer (Ubuntu Xenial): importance |
Undecided |
Medium |
|
| 2018-12-06 13:11:14 |
Dan Streetman |
debian-installer (Ubuntu Trusty): importance |
Undecided |
Medium |
|
| 2018-12-06 13:11:31 |
Dan Streetman |
debian-installer (Ubuntu Cosmic): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-06 13:11:36 |
Dan Streetman |
debian-installer (Ubuntu Bionic): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-06 13:12:52 |
Dan Streetman |
bug watch added |
|
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842040 |
|
| 2018-12-06 13:12:52 |
Dan Streetman |
bug task added |
|
debian-installer (Debian) |
|
| 2018-12-06 13:36:05 |
Bug Watch Updater |
debian-installer (Debian): status |
Unknown |
Fix Released |
|
| 2018-12-06 14:03:44 |
Dan Streetman |
attachment added |
|
lp1804576-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219749/+files/lp1804576-disco.debdiff |
|
| 2018-12-06 14:04:01 |
Dan Streetman |
attachment removed |
d-i_disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219562/+files/d-i_disco.debdiff |
|
|
| 2018-12-06 14:04:31 |
Dan Streetman |
attachment removed |
lp1804576-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219749/+files/lp1804576-disco.debdiff |
|
|
| 2018-12-06 14:04:58 |
Dan Streetman |
attachment added |
|
lp1807023-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219750/+files/lp1807023-disco.debdiff |
|
| 2018-12-06 15:07:13 |
Dan Streetman |
attachment added |
|
lp1807023-debian-installer-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219766/+files/lp1807023-debian-installer-disco.debdiff |
|
| 2018-12-06 15:07:22 |
Dan Streetman |
attachment removed |
lp1807023-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219750/+files/lp1807023-disco.debdiff |
|
|
| 2018-12-06 15:07:58 |
Dan Streetman |
attachment added |
|
lp1807023-ca-certificates-disco.debdiff https://bugs.launchpad.net/debian/+source/debian-installer/+bug/1807023/+attachment/5219767/+files/lp1807023-ca-certificates-disco.debdiff |
|
| 2018-12-06 18:30:09 |
Dan Streetman |
bug task added |
|
ca-certificates (Ubuntu) |
|
| 2018-12-06 18:30:31 |
Dan Streetman |
ca-certificates (Ubuntu Bionic): importance |
Undecided |
Medium |
|
| 2018-12-06 18:30:31 |
Dan Streetman |
ca-certificates (Ubuntu Bionic): status |
New |
In Progress |
|
| 2018-12-06 18:30:31 |
Dan Streetman |
ca-certificates (Ubuntu Bionic): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-06 18:30:43 |
Dan Streetman |
ca-certificates (Ubuntu Cosmic): importance |
Undecided |
Medium |
|
| 2018-12-06 18:30:43 |
Dan Streetman |
ca-certificates (Ubuntu Cosmic): status |
New |
In Progress |
|
| 2018-12-06 18:30:43 |
Dan Streetman |
ca-certificates (Ubuntu Cosmic): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-06 18:30:57 |
Dan Streetman |
ca-certificates (Ubuntu Disco): importance |
Undecided |
Medium |
|
| 2018-12-06 18:30:57 |
Dan Streetman |
ca-certificates (Ubuntu Disco): status |
New |
In Progress |
|
| 2018-12-06 18:30:57 |
Dan Streetman |
ca-certificates (Ubuntu Disco): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-06 18:40:46 |
Dan Streetman |
attachment added |
|
lp1807023-debian-installer-cosmic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219786/+files/lp1807023-debian-installer-cosmic.debdiff |
|
| 2018-12-06 18:40:59 |
Dan Streetman |
attachment added |
|
lp1807023-debian-installer-bionic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219787/+files/lp1807023-debian-installer-bionic.debdiff |
|
| 2018-12-06 18:42:44 |
Dan Streetman |
attachment removed |
lp1807023-ca-certificates-disco.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219767/+files/lp1807023-ca-certificates-disco.debdiff |
|
|
| 2018-12-06 18:43:00 |
Dan Streetman |
attachment added |
|
lp1807023-ca-certificates-disco.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219788/+files/lp1807023-ca-certificates-disco.debdiff |
|
| 2018-12-06 18:43:13 |
Dan Streetman |
attachment added |
|
lp1807023-ca-certificates-cosmic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219789/+files/lp1807023-ca-certificates-cosmic.debdiff |
|
| 2018-12-06 18:43:25 |
Dan Streetman |
attachment added |
|
lp1807023-ca-certificates-bionic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219790/+files/lp1807023-ca-certificates-bionic.debdiff |
|
| 2018-12-06 18:43:57 |
Dan Streetman |
attachment removed |
ca-certificates_disco.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219559/+files/ca-certificates_disco.debdiff |
|
|
| 2018-12-06 18:44:07 |
Dan Streetman |
attachment removed |
ca-certificates_cosmic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219560/+files/ca-certificates_cosmic.debdiff |
|
|
| 2018-12-06 18:44:14 |
Dan Streetman |
attachment removed |
ca-certificates_bionic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219561/+files/ca-certificates_bionic.debdiff |
|
|
| 2018-12-06 18:44:22 |
Dan Streetman |
attachment removed |
d-i_cosmic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219563/+files/d-i_cosmic.debdiff |
|
|
| 2018-12-06 18:44:29 |
Dan Streetman |
attachment removed |
d-i_bionic.debdiff https://bugs.launchpad.net/ubuntu/disco/+source/ca-certificates/+bug/1807023/+attachment/5219564/+files/d-i_bionic.debdiff |
|
|
| 2018-12-07 15:08:35 |
Eric Desrochers |
bug |
|
|
added subscriber Eric Desrochers |
| 2018-12-07 15:09:50 |
Eric Desrochers |
bug task added |
|
debian-installer |
|
| 2018-12-07 15:28:21 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-ca-certificates-xenial.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220101/+files/lp1807023-ca-certificates-xenial.debdiff |
|
| 2018-12-07 15:28:39 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-debian-installer-xenial.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220102/+files/lp1807023-debian-installer-xenial.debdiff |
|
| 2018-12-07 15:28:57 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-ca-certificates-trusty.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220103/+files/lp1807023-ca-certificates-trusty.debdiff |
|
| 2018-12-07 15:29:10 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-debian-installer-trusty.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220104/+files/lp1807023-debian-installer-trusty.debdiff |
|
| 2018-12-07 15:35:43 |
Mauricio Faria de Oliveira |
description |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu archive despite being available for
download in Launchpad with a link for some reason
(perhaps a problem during import from Debian/sid?)
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The older releases (Trusty, Xenial) are affected,
but not requested for, and would need more work,
as the udeb is not yet in the packaging but that
is doable if required for the process.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging purposes, one can install strace-udeb in the installer to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu 'main' component, but in 'universe',
despite the normal deb being in 'main'.
However, when rebuilding in a PPA it goes into
'main' accordingly, and can be used by default
by debian-installer (otherwise, UDEB_COMPONENTS
has to be modified to include universe/d-i).
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive (at least in PPA for testing).
Hopefully that can be sorted out for this fix
to work out.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The fix for Trusty and Xenial needed a little
bit more work to build/ship the (new) udeb.
It would be good to have them too if at all possible.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging purposes, one can install strace-udeb in the installer to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
|
| 2018-12-07 15:45:42 |
Mauricio Faria de Oliveira |
description |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu 'main' component, but in 'universe',
despite the normal deb being in 'main'.
However, when rebuilding in a PPA it goes into
'main' accordingly, and can be used by default
by debian-installer (otherwise, UDEB_COMPONENTS
has to be modified to include universe/d-i).
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive (at least in PPA for testing).
Hopefully that can be sorted out for this fix
to work out.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is request for Bionic, Cosmic, Disco.
The fix for Trusty and Xenial needed a little
bit more work to build/ship the (new) udeb.
It would be good to have them too if at all possible.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[Debugging]
For debugging purposes, one can install strace-udeb in the installer to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
[Impact]
* The installer stock images fail to validate any HTTPS
certificates because ca-certificates is not available
in the installer environment.
* This causes wget/download errors for preseed files on
HTTPS servers (or HTTP servers that redirect to HTTPS,
which are increasingly common nowadays - e.g., GitHub)
and theoretically any other files that are downloaded
with d-i-utils/fetch-url/wget.
* The fix is to ship ca-certificates-udeb in installer
stock images.
* Debian already ships ca-certificate-udeb in the stock
installer images; the fix is applied since Jan 2017.
(reference: Debian Bug #842040 / d-i commit 2f00c51a [1])
[Test Case]
* In the installer shell:
~ # wget http://github.com # or https://github.com
- FAIL if ca-certificates-udeb is missing:
"ERROR: cannot verify github.com's certificate, <...>'
- PASS if ca-certificates-udeb is available
"Saving to: 'index.html'"
* Test steps with virt-install and netboot images
are provided in the comments, for each release.
[Regression Potential]
* Low. This just adds the ca-certificates files in
/etc/ssl/certs and symlink in /usr/lib/ssl/certs,
so only tools looking for that would be affected.
* Apparently only wget checks for/uses those files,
and the difference in behavior is download errors
no longer occur.
[Notes]
* The ca-certificates-udeb is not currently present
in the Ubuntu 'main' component, but in 'universe',
despite the normal deb being in 'main'.
However, when rebuilding in a PPA it goes into
'main' accordingly, and can be used by default
by debian-installer (otherwise, UDEB_COMPONENTS
has to be modified to include universe/d-i).
* So this fix includes a no-change-rebuild for the
ca-certificates package, in order to publish the
udeb in the archive (at least in PPA for testing).
Hopefully that can be sorted out for this fix
to work out.
* The ca-certificates and debian-installer builds
have been done in a PPA using all architectures,
and testing has been done with the amd64 images.
* This fix is requested for Bionic, Cosmic, Disco
at least.
* The fix for Trusty and Xenial needed a little
bit more work to build/ship the (new) udeb.
(reference: Debian Bug #845456 / ca-certificates commit 3acb3a90 [2])
It would be good to have them too if at all possible.
[1] https://salsa.debian.org/installer-team/debian-installer/commit/2f00c51a7ead982ae1cd71bee06c8416890196b6
[2] https://salsa.debian.org/debian/ca-certificates/commit/3acb3a9042a00307ba35d10052d81cdc206c34a4
[Debugging]
For debugging purposes, one can install strace-udeb in the installer to verify wget's stat() calls to /usr/lib/ssl/certs.
~ # anna-install strace-udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", 0x7ffdba51b570) = -1 ENOENT (No such file or directory)
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.
+++ exited with 5 +++
~ #
~ # anna-install ca-certificates-udeb # not in archive yet.
unknown udeb ca-certificates-udeb
~ # wget --no-check-certificate https://launchpad.net/ubuntu/+archive/primary/+files/ca-certificates-udeb_20180409_all.udeb
~ # udpkg -i ca-certificates-udeb_20180409_all.udeb
~ # strace -e stat wget -O- https://github.com >/dev/null
...
Resolving github.com... stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=20, ...}) = 0
140.82.118.3, 140.82.118.4
Connecting to github.com|140.82.118.3|:443... connected.
stat("/usr/lib/ssl/certs/45bfefc3.0", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
stat("/usr/lib/ssl/certs/244b5494.0", {st_mode=S_IFREG|0644, st_size=1367, ...}) = 0
stat("/usr/lib/ssl/certs/244b5494.1", 0x7fffbb9431c0) = -1 ENOENT (No such file or directory)
HTTP request sent, awaiting response... 200 OK
stat("-", 0x7fffbb943558) = -1 ENOENT (No such file or directory)
Length: unspecified [text/html]
Saving to: 'STDOUT'
...
+++ exited with 0 +++ |
|
| 2018-12-07 18:30:23 |
Dan Streetman |
removed subscriber Ubuntu Sponsors Team |
|
|
|
| 2018-12-07 18:34:14 |
Dan Streetman |
ca-certificates (Ubuntu Disco): status |
In Progress |
Invalid |
|
| 2018-12-07 18:34:14 |
Dan Streetman |
ca-certificates (Ubuntu Disco): assignee |
Mauricio Faria de Oliveira (mfo) |
|
|
| 2018-12-07 18:34:24 |
Dan Streetman |
ca-certificates (Ubuntu Cosmic): status |
In Progress |
Invalid |
|
| 2018-12-07 18:34:24 |
Dan Streetman |
ca-certificates (Ubuntu Cosmic): assignee |
Mauricio Faria de Oliveira (mfo) |
|
|
| 2018-12-07 18:34:37 |
Dan Streetman |
ca-certificates (Ubuntu Bionic): status |
In Progress |
Invalid |
|
| 2018-12-07 18:34:37 |
Dan Streetman |
ca-certificates (Ubuntu Bionic): assignee |
Mauricio Faria de Oliveira (mfo) |
|
|
| 2018-12-07 18:34:47 |
Dan Streetman |
ca-certificates (Ubuntu Xenial): status |
New |
Invalid |
|
| 2018-12-07 18:35:02 |
Dan Streetman |
ca-certificates (Ubuntu Xenial): status |
Invalid |
In Progress |
|
| 2018-12-07 18:35:02 |
Dan Streetman |
ca-certificates (Ubuntu Xenial): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-07 18:35:17 |
Dan Streetman |
ca-certificates (Ubuntu Trusty): importance |
Undecided |
Medium |
|
| 2018-12-07 18:35:17 |
Dan Streetman |
ca-certificates (Ubuntu Trusty): status |
New |
In Progress |
|
| 2018-12-07 18:35:17 |
Dan Streetman |
ca-certificates (Ubuntu Trusty): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-07 18:35:25 |
Dan Streetman |
ca-certificates (Ubuntu Xenial): importance |
Undecided |
Medium |
|
| 2018-12-07 18:35:42 |
Dan Streetman |
debian-installer (Ubuntu Xenial): status |
New |
In Progress |
|
| 2018-12-07 18:35:42 |
Dan Streetman |
debian-installer (Ubuntu Xenial): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-07 18:35:57 |
Dan Streetman |
debian-installer (Ubuntu Trusty): status |
New |
In Progress |
|
| 2018-12-07 18:35:57 |
Dan Streetman |
debian-installer (Ubuntu Trusty): assignee |
|
Mauricio Faria de Oliveira (mfo) |
|
| 2018-12-07 18:39:32 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/debian-installer/ubuntu |
|
| 2018-12-07 18:40:13 |
Dan Streetman |
attachment removed |
lp1807023-ca-certificates-disco.debdiff https://bugs.launchpad.net/ubuntu/trusty/+source/debian-installer/+bug/1807023/+attachment/5219788/+files/lp1807023-ca-certificates-disco.debdiff |
|
|
| 2018-12-07 18:40:23 |
Dan Streetman |
attachment removed |
lp1807023-ca-certificates-cosmic.debdiff https://bugs.launchpad.net/ubuntu/trusty/+source/debian-installer/+bug/1807023/+attachment/5219789/+files/lp1807023-ca-certificates-cosmic.debdiff |
|
|
| 2018-12-07 18:40:32 |
Dan Streetman |
attachment removed |
lp1807023-ca-certificates-bionic.debdiff https://bugs.launchpad.net/ubuntu/trusty/+source/debian-installer/+bug/1807023/+attachment/5219790/+files/lp1807023-ca-certificates-bionic.debdiff |
|
|
| 2018-12-07 18:48:25 |
Eric Desrochers |
attachment removed |
lp1807023-ca-certificates-xenial.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220101/+files/lp1807023-ca-certificates-xenial.debdiff |
|
|
| 2018-12-07 18:48:45 |
Eric Desrochers |
attachment removed |
lp1807023-ca-certificates-trusty.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220103/+files/lp1807023-ca-certificates-trusty.debdiff |
|
|
| 2018-12-07 19:11:37 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-ca-certificates-trusty.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220172/+files/lp1807023-ca-certificates-trusty.debdiff |
|
| 2018-12-07 19:11:55 |
Mauricio Faria de Oliveira |
attachment added |
|
lp1807023-ca-certificates-xenial.debdiff https://bugs.launchpad.net/ubuntu/+source/debian-installer/+bug/1807023/+attachment/5220173/+files/lp1807023-ca-certificates-xenial.debdiff |
|
| 2018-12-07 19:20:28 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/debian-installer/cosmic-proposed |
|
| 2018-12-07 19:21:00 |
Adam Conrad |
debian-installer (Ubuntu Cosmic): status |
In Progress |
Fix Committed |
|
| 2018-12-07 19:21:03 |
Adam Conrad |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2018-12-07 19:21:05 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
| 2018-12-07 19:21:10 |
Adam Conrad |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet |
patch sts sts-sponsor sts-sponsor-ddstreet verification-needed verification-needed-cosmic |
|
| 2018-12-07 19:23:31 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/debian-installer/bionic-proposed |
|
| 2018-12-07 19:26:58 |
Adam Conrad |
debian-installer (Ubuntu Bionic): status |
In Progress |
Fix Committed |
|
| 2018-12-07 19:27:06 |
Adam Conrad |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-needed verification-needed-cosmic |
patch sts sts-sponsor sts-sponsor-ddstreet verification-needed verification-needed-bionic verification-needed-cosmic |
|
| 2018-12-07 19:27:31 |
Adam Conrad |
debian-installer (Ubuntu Disco): status |
In Progress |
Fix Committed |
|
| 2018-12-07 20:02:25 |
Launchpad Janitor |
debian-installer (Ubuntu Disco): status |
Fix Committed |
Fix Released |
|
| 2018-12-07 20:45:31 |
Mauricio Faria de Oliveira |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-needed verification-needed-bionic verification-needed-cosmic |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done verification-done-bionic verification-done-cosmic |
|
| 2018-12-08 15:25:41 |
Bug Watch Updater |
debian-installer: status |
Unknown |
Fix Released |
|
| 2018-12-13 14:00:35 |
Łukasz Zemczak |
debian-installer (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
| 2018-12-13 14:00:43 |
Łukasz Zemczak |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done verification-done-bionic verification-done-cosmic |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-needed verification-needed-xenial |
|
| 2018-12-13 14:04:25 |
Łukasz Zemczak |
debian-installer (Ubuntu Trusty): status |
In Progress |
Fix Committed |
|
| 2018-12-13 14:04:32 |
Łukasz Zemczak |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-needed verification-needed-xenial |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-needed verification-needed-trusty verification-needed-xenial |
|
| 2018-12-13 14:13:57 |
Łukasz Zemczak |
ca-certificates (Ubuntu Xenial): status |
In Progress |
Fix Committed |
|
| 2018-12-13 14:16:58 |
Łukasz Zemczak |
ca-certificates (Ubuntu Trusty): status |
In Progress |
Fix Committed |
|
| 2018-12-14 08:35:40 |
Adam Conrad |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2018-12-14 08:35:53 |
Launchpad Janitor |
debian-installer (Ubuntu Bionic): status |
Fix Committed |
Fix Released |
|
| 2018-12-14 08:45:42 |
Launchpad Janitor |
debian-installer (Ubuntu Cosmic): status |
Fix Committed |
Fix Released |
|
| 2018-12-14 09:21:27 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/debian-installer/trusty-proposed |
|
| 2018-12-14 09:23:19 |
Launchpad Janitor |
branch linked |
|
lp:~ubuntu-core-dev/debian-installer/xenial-proposed |
|
| 2018-12-19 20:13:16 |
Dan Streetman |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-needed verification-needed-trusty verification-needed-xenial |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-done-trusty verification-needed verification-needed-xenial |
|
| 2018-12-19 20:19:36 |
Dan Streetman |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-done-trusty verification-needed verification-needed-xenial |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-done-trusty verification-done-xenial verification-needed |
|
| 2018-12-19 20:19:45 |
Dan Streetman |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done-bionic verification-done-cosmic verification-done-trusty verification-done-xenial verification-needed |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done verification-done-bionic verification-done-cosmic verification-done-trusty verification-done-xenial |
|
| 2018-12-19 20:20:09 |
Dan Streetman |
tags |
patch sts sts-sponsor sts-sponsor-ddstreet verification-done verification-done-bionic verification-done-cosmic verification-done-trusty verification-done-xenial |
patch sts verification-done verification-done-bionic verification-done-cosmic verification-done-trusty verification-done-xenial |
|
| 2018-12-19 20:29:36 |
Michael Shuler |
bug |
|
|
added subscriber Michael Shuler |
| 2019-01-07 10:44:08 |
Launchpad Janitor |
ca-certificates (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
| 2019-01-07 10:58:13 |
Launchpad Janitor |
debian-installer (Ubuntu Xenial): status |
Fix Committed |
Fix Released |
|
| 2019-01-07 11:00:02 |
Launchpad Janitor |
ca-certificates (Ubuntu Trusty): status |
Fix Committed |
Fix Released |
|
| 2019-01-07 11:02:55 |
Launchpad Janitor |
debian-installer (Ubuntu Trusty): status |
Fix Committed |
Fix Released |
|
