Path: csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From: "Debian Bug Tracking System" <owner@bugs.debian.org>
Newsgroups: linux.debian.bugs.rc
Subject: Bug#972802: marked as done (RM: rust-webpki-roots -- ROM;  duplicates ca-certificates)
Date: Sun, 08 Nov 2020 22:50:02 +0100
Message-ID: <B90Js-R5-17@gated-at.bofh.it>
References: <B90Js-R5-19@gated-at.bofh.it> <B3gQV-6gv-3@gated-at.bofh.it>
Old-Return-Path: <debbugs@buxtehude.debian.org>
MIME-Version: 1.0
Reply-To: 972802@bugs.debian.org
Content-Type: multipart/mixed; boundary="----------=_1604871919-10921-0"
Approved: robomod@news.nic.it
Lines: 250
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.bugs.rc:289404

This is a multi-part message in MIME format...

------------=_1604871919-10921-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Sun, 08 Nov 2020 21:42:05 +0000
with message-id <E1kbsRp-000HQK-OW@fasolo.debian.org>
and subject line Bug#972802: Removed package(s) from unstable
has caused the Debian Bug report #972802,
regarding RM: rust-webpki-roots -- ROM; duplicates ca-certificates
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


--=20
972802: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D972802
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

------------=_1604871919-10921-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.debian.org; 24 Oct 2020 01:42:51 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-21.0 required=4.0 tests=ALL_TRUSTED,BAYES_00,
	DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
	FROMDEVELOPER,PGPSIGNATURE,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham
	autolearn_force=no version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 12; hammy, 150; neutral, 106; spammy,
	0. spammytokens: hammytokens:0.000-+--armhf,
	0.000-+--UD:ftp-master.debian.org, 0.000-+--H*F:U*pabs,
	0.000-+--Hx-spam-relays-external:36ff, 0.000-+--H*r:36ff
Return-path: <pabs@debian.org>
Received: from master.debian.org ([2001:41b8:202:deb:216:36ff:fe40:4001]:38436)
	from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP CA,CN=master.debian.org,EMAIL=hostmaster@master.debian.org (verified)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <pabs@debian.org>)
	id 1kW8a3-0001it-Fl
	for submit@bugs.debian.org; Sat, 24 Oct 2020 01:42:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org;
	 s=smtpauto.master; h=MIME-Version:Date:Content-Type:To:From:Subject:
	Message-ID:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:In-Reply-To:References;
	bh=Zp71v6g9i3lIfZAjSR6pFmRijaQ7GFurigMbB8UUKGo=; b=HnfNzpTcUsJASy1aqLMi6NmU9f
	fSytPJFJ1oTBFHRXD9RW/GSroMMLvmtDc4Tzb/REp08WP8Qn7OBKX3jTCfgzOVMy/uwFbs5AmA+HT
	FdY5wBtuP1kUHZe+8qEZvRB/KR1bZoH/imq1Fbg7tKL6G+IMvFpEm1rkvgGCCtTo0T82o04Mep7P4
	yniT+Z5qEVBe87DtXTlk5t60WouqjPnbvq3wi+KhJxyLulVlCW/nayqtLpozP4r9n+hIkcjcyBf86
	AVS4jieJf4aRVS1f++HFu+0mzus1nOoAn6YHdKm7zyX1rz9eNlVP19DT5h55ljmLy2FxFiKDeGIHR
	JxkJ7rQQ==;
Received: from pabs by master.debian.org with local (Exim 4.92)
	(envelope-from <pabs@debian.org>)
	id 1kW8a1-0002XM-V6
	for submit@bugs.debian.org; Sat, 24 Oct 2020 01:42:49 +0000
Message-ID: <70b1caf57174d44f8dec15fb5b000588dfd407ef.camel@debian.org>
Subject: rust-webpki-roots: duplicates ca-certificates, remove from Debian?
From: Paul Wise <pabs@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Organization: Debian
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-saW1JH/1pscdL2XCxUWX"
Date: Sat, 24 Oct 2020 09:42:40 +0800
MIME-Version: 1.0
User-Agent: Evolution 3.36.4-2 
Delivered-To: submit@bugs.debian.org


--=-saW1JH/1pscdL2XCxUWX
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Source: rust-webpki-roots
Severity: serious
Tags: security
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>, kpcyrd <git@=
rxv.cc>
Usertags: embed

rust-webpki-roots is essentially a duplicate of ca-certificates.

https://tracker.debian.org/pkg/ca-certificates
https://wiki.debian.org/EmbeddedCopies

AFAICT, rebuilding the package from source doesn't run the upstream
supplied build.py script, so rebuilding from source won't update the
certs available in the package.

Having to rebuild rust-webpki-roots and everything that depends on it
after every update of ca-certificates would be very annoying though.

Probably rust-webpki-roots should be removed from Debian and replaced
with something that loads the certs from ca-certificates at runtime.

As far as I can tell, nothing in Debian uses rust-webpki-roots, but on
IRC, kpcyrd mentioned that they have projects that use webpki-roots,
CCing them in order to get more info about that usage.

   $ ssh mirror.ftp-master.debian.org dak rm -s unstable -Rn rust-webpki-ro=
ots



   Will remove the following packages from unstable:

   librust-webpki-roots-dev | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i38=
6
   rust-webpki-roots |   0.20.0-1 | source
   webpki-roots | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i386

   Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.d=
ebian.net>

   ------------------- Reason -------------------

   ----------------------------------------------

   Checking reverse dependencies...
   No dependency problem found.

--=20
bye,
pabs

https://wiki.debian.org/PaulWise

--=-saW1JH/1pscdL2XCxUWX
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
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=DR2k
-----END PGP SIGNATURE-----

--=-saW1JH/1pscdL2XCxUWX--

------------=_1604871919-10921-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 972802-close) by bugs.debian.org; 8 Nov 2020 21:42:07 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-17.6 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER,
	RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham
	autolearn_force=no version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 150; neutral, 87; spammy,
	0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
	0.000-+--H*rp:D*ftp-master.debian.org,
	0.000-+--Hx-spam-relays-external:sk:envelop, 0.000-+--H*r:138.16.160,
	0.000-+--Hx-spam-relays-external:138.16.160.17
Return-path: <envelope@ftp-master.debian.org>
Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:58510)
	from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP CA,CN=muffat.debian.org,EMAIL=hostmaster@muffat.debian.org (verified)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <envelope@ftp-master.debian.org>)
	id 1kbsRr-0002Dw-1i
	for 972802-close@bugs.debian.org; Sun, 08 Nov 2020 21:42:07 +0000
Received: from fasolo.debian.org ([138.16.160.17]:45412)
	from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP CA,CN=fasolo.debian.org,EMAIL=hostmaster@fasolo.debian.org (verified)
	by muffat.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <envelope@ftp-master.debian.org>)
	id 1kbsRq-0006tm-Od; Sun, 08 Nov 2020 21:42:06 +0000
Received: from joerg by fasolo.debian.org with local (Exim 4.92)
	(envelope-from <envelope@ftp-master.debian.org>)
	id 1kbsRp-000HQK-OW; Sun, 08 Nov 2020 21:42:05 +0000
From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 972802-close@bugs.debian.org
X-DAK: dak rm
Cc: rust-webpki-roots@packages.debian.org
X-Debian: DAK
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Subject: Bug#972802: Removed package(s) from unstable
Message-Id: <E1kbsRp-000HQK-OW@fasolo.debian.org>
Date: Sun, 08 Nov 2020 21:42:05 +0000

We believe that the bug you reported is now fixed; the following
package(s) have been removed from unstable:

librust-webpki-roots-dev | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i386
rust-webpki-roots |   0.20.0-1 | source
webpki-roots | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i386

------------------- Reason -------------------
ROM; duplicates ca-certificates
----------------------------------------------

Note that the package(s) have simply been removed from the tag
database and may (or may not) still be in the pool; this is not a bug.
The package(s) will be physically removed automatically when no suite
references them (and in the case of source, when no binary references
it).  Please also remember that the changes have been done on the
master archive and will not propagate to any mirrors until the next
dinstall run at the earliest.

Packages are usually not removed from testing by hand. Testing tracks
unstable and will automatically remove packages which were removed
from unstable when removing them from testing causes no dependency
problems. The release team can force a removal from testing if it is
really needed, please contact them if this should be the case.

We try to close bugs which have been reported against this package
automatically. But please check all old bugs, if they were closed
correctly or should have been re-assigned to another package.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 972802@bugs.debian.org.

The full log for this bug can be viewed at https://bugs.debian.org/972802

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Joerg Jaspert (the ftpmaster behind the curtain)
------------=_1604871919-10921-0--