[Aptitude-devel] Bug#877948: aptitude needs to improve

[Anonymous]

Package: aptitude
Followup-For: Bug #877948

Mr. Kalnischkies,

I really appreciate your helpful and detailed reply, as well as your
good advice.

I must say though that you should not have had to explain the SHA1
limitation - that's something aptitude should have done.  I've always
found the user feedback from aptitude quite lacking w.r.t errors (and
reported it 4 years ago):

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706183

How could I (as an apt team outsider) have known that the (poorly
worded) "invalid" signature error was due to use of a substandard
algorithm?  I ran aptitude with debugging output enabled, and it gave
no further information about this.  The man page for aptitude also
says nothing about the subjective criteria in play for validation.

BTW, I have a couple new bug reports coming to hopefully mitigate the
report herein being repeated by others.

-- Package-specific info:
Terminal: screen
$DISPLAY is set.
which aptitude: /usr/bin/aptitude

aptitude version information:
aptitude 0.6.11 compiled at Nov  8 2014 13:34:39
Compiler: g++ 4.9.1
Compiled against:
  apt version 4.12.0
  NCurses version 5.9
  libsigc++ version: 2.4.0
  Gtk+ support disabled.
  Qt support disabled.

Current library versions:
  NCurses version: ncurses 5.9.20140913
  cwidget version: 0.5.17
  Apt version: 4.12.0

aptitude linkage:
	linux-vdso.so.1 (0x00007ffd2e9f5000)
	/usr/lib/torsocks/libtorsocks.so (0x00007ffb63a80000)
	libapt-pkg.so.4.12 => /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12 (0x00007ffb63710000)
	libncursesw.so.5 => /lib/x86_64-linux-gnu/libncursesw.so.5 (0x00007ffb634da000)
	libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007ffb632b0000)
	libsigc-2.0.so.0 => /usr/lib/x86_64-linux-gnu/libsigc-2.0.so.0 (0x00007ffb630aa000)
	libcwidget.so.3 => /usr/lib/x86_64-linux-gnu/libcwidget.so.3 (0x00007ffb62d94000)
	libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0 (0x00007ffb62acb000)
	libboost_iostreams.so.1.55.0 => /usr/lib/x86_64-linux-gnu/libboost_iostreams.so.1.55.0 (0x00007ffb628b3000)
	libxapian.so.22 => /usr/lib/libxapian.so.22 (0x00007ffb624a2000)
	libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007ffb62285000)
	libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007ffb61f7a000)
	libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007ffb61c79000)
	libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007ffb61a63000)
	libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007ffb616b8000)
	libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007ffb614b4000)
	libutil.so.1 => /lib/x86_64-linux-gnu/libutil.so.1 (0x00007ffb612b1000)
	libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007ffb61096000)
	libbz2.so.1.0 => /lib/x86_64-linux-gnu/libbz2.so.1.0 (0x00007ffb60e86000)
	liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007ffb60c63000)
	librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007ffb60a5b000)
	libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x00007ffb60856000)
	/lib64/ld-linux-x86-64.so.2 (0x00007ffb642e5000)

-- System Information:
Debian Release: 8.6
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common           0.6.11-1
ii  libapt-pkg4.12            1.0.9.8.3
ii  libboost-iostreams1.55.0  1.55.0+dfsg-3
ii  libc6                     2.19-18+deb8u6
ii  libcwidget3               0.5.17-2
ii  libgcc1                   1:4.9.2-10
ii  libncursesw5              5.9+20140913-1+b1
ii  libsigc++-2.0-0c2a        2.4.0-1
ii  libsqlite3-0              3.8.7.1-1+deb8u2
ii  libstdc++6                4.9.2-10
ii  libtinfo5                 5.9+20140913-1+b1
ii  libxapian22               1.2.19-1+deb8u1

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc]  0.6.11-1
ii  libparse-debianchangelog-perl   1.2.0-1.1
ii  sensible-utils                  0.0.9

Versions of packages aptitude suggests:
ii  apt-xapian-index  0.47
pn  debtags           <none>
ii  tasksel           3.31+deb8u1

-- no debconf information