Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #365023

Bug#1072977: apt-listbugs 0.1.42 is broken

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Control: tags -1 + unreproducible moreinfo


On Tue, 11 Jun 2024 10:27:33 +0200 Karine Crèvecœur wrote:

> Package: apt-listbugs
> Version: 0.1.42
> Severity: grave
> 
> 
> Hi,

Hello Karine,
thanks for caring about apt-listbugs!

> 
> Since the upgrade to version 0.1.42, apt-listbugs doesn't work anymore.

That's unfortunate.

However, I have tested apt-listbugs/0.1.42 for months, without ever
experiencing any issue like this.
And I am currently unable to reproduce the issue.

> 
> As examplen the command
>     apt-listbugs list apt-lisbugs
> gave the error:
> 
> Retrieving bug reports... 0% Fail
> Error retrieving bug reports from the server with the following error message:
> E: SSL_connect returned=1 errno=0 peeraddr=[2605:bc80:3010:b00:0:deb:166:212]:443 state=error: certificate verify failed (unable to get local issuer certificate)
> It could be because your network is down, or because of broken proxy servers, or the BTS server itself is down. Check network configuration and try again

This command works on my boxes:

  $ apt-listbugs -v
  0.1.42
  $ apt-listbugs list apt-listbugs
  Retrieving bug reports... Done
  Parsing Found/Fixed information... Done
  grave bugs of apt-listbugs (→ ) <Outstanding>
   b1 - #1072977 - apt-listbugs 0.1.42 is broken
  Summary:
   apt-listbugs(1 bug)

> 
> 
> I downgrade apt-listbugs to the version 0.1.41-nmu1, it works just fine.
[...]
> I don't figure out why this issue occurs.

It seems that your system is unable to verify the TLS certificate of
https://bugs.debian.org

apt-listbugs/0.1.42 switched to https by default, that's why it now
needs to connect to the SOAP server via https.

Can you think of a reason why your system fails to verify the TLS
certificate of https://bugs.debian.org ?

You should have package 'ca-certificates' installed:

  $ apt policy ca-certificates
  ca-certificates:
    Installed: 20240203
    Candidate: 20240203
    Version table:
   *** 20240203 800
          800 http://deb.debian.org/debian testing/main amd64 Packages
          500 http://deb.debian.org/debian unstable/main amd64 Packages
          100 /var/lib/dpkg/status

I say that you should, since there's the following dependency chain:
apt-listbugs → ruby → ruby3.1 → rubygems-integration → ca-certificates

Are you able to verify other TLS certificates, when accessing other
sites via https?
For instance, if you have a web browser installed on the same system,
can you visit https://www.debian.org/ with your browser, without TLS
certificate issues?

Please let me know, so that we can try to debug the issue.


-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE

Back to linux.debian.bugs.rc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1072977: apt-listbugs 0.1.42 is broken Francesco Poli <invernomuto@paranoici.org> - 2024-06-12 01:00 +0200
  Processed: Re: Bug#1072977: apt-listbugs 0.1.42 is broken "Debian Bug Tracking System" <owner@bugs.debian.org> - 2024-06-12 01:00 +0200
  Bug#1072977: apt-listbugs 0.1.42 is broken Karine Crèvecœur <enikar@gresille.org> - 2024-06-12 11:10 +0200
    Bug#1072977: apt-listbugs 0.1.42 is broken Francesco Poli <invernomuto@paranoici.org> - 2024-06-13 00:00 +0200
      Bug#1072977: apt-listbugs 0.1.42 is broken Karine Crèvecœur <enikar@gresille.org> - 2024-06-13 10:00 +0200

csiph-web