Bug#774163: Unable to upgrade or install ttf-root-installer (dpkg: error processing package) because of invalid certificate on root.cern.ch

Carlos Alberto Lopez Perez clopez at igalia.com
Mon Dec 29 18:38:49 UTC 2014 

Package: ttf-root-installer
Version: 5.34.19+dfsg-1.1
Severity: grave


Hi, when upgrading my system ttf-root-installer
broke the upgrade because its configure script failed.

I tried to purge it completely and install it again,
unfortunately it broke again:

$ sudo apt-get install ttf-root-installer
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
  ttf-root-installer
0 upgraded, 1 newly installed, 0 to remove and 633 not upgraded.
Need to get 28.1 kB of archives.
After this operation, 91.1 kB of additional disk space will be used.
Get:1 http://mirror.ovh.net/debian/ sid/contrib ttf-root-installer all 5.34.19+dfsg-1.1 [28.1 kB]
Fetched 28.1 kB in 0s (135 kB/s)              
Retrieving bug reports... Done
Parsing Found/Fixed information... Done
Preconfiguring packages ...
Selecting previously unselected package ttf-root-installer.
(Reading database ... 572464 files and directories currently installed.)
Preparing to unpack .../ttf-root-installer_5.34.19+dfsg-1.1_all.deb ...
Unpacking ttf-root-installer (5.34.19+dfsg-1.1) ...
Setting up ttf-root-installer (5.34.19+dfsg-1.1) ...
dpkg: error processing package ttf-root-installer (--configure):
 subprocess installed post-installation script returned error exit status 5
Errors were encountered while processing:
 ttf-root-installer
E: Sub-process /usr/bin/dpkg returned an error code (1)



Upon furter investigation :


$ sudo DEBCONF_DEBUG=developer dpkg -D777 --configure ttf-root-installer
D000001: ensure_diversions: new, (re)loading
D000001: process queue pkg ttf-root-installer:all queue.len 0 progress 1, try 1
D000040: checking dependencies of ttf-root-installer:all (- <none>)
D000400:   checking group ...
D000400:     checking possibility  -> debconf
D000400:       checking non-provided pkg debconf:all
D000400:       is installed, ok and found
D000400:     found 3
D000400:   found 3 matched 0 possfixbytrig -
D000400:   checking group ...
D000400:     checking possibility  -> wget
D000400:       checking non-provided pkg wget:amd64
D000400:       is installed, ok and found
D000400:     found 3
D000400:   found 3 matched 0 possfixbytrig -
D000400:   checking group ...
D000400:     checking possibility  -> xfonts-utils
D000400:       checking non-provided pkg xfonts-utils:amd64
D000400:       is installed, ok and found
D000400:     found 3
D000400:   found 3 matched 0 possfixbytrig -
D000040: ok 2 msgs >><<
D000040:     checking Breaks
D000400:      checking virtbroken root-ttf
Setting up ttf-root-installer (5.34.19+dfsg-1.1) ...
D000002: fork/exec /var/lib/dpkg/info/ttf-root-installer.postinst ( configure  )
debconf (developer): frontend started
debconf (developer): frontend running, package name is ttf-root-installer
debconf (developer): starting /var/lib/dpkg/info/ttf-root-installer.config configure 
debconf (developer): <-- TITLE ROOT TTF Installer
debconf (developer): --> 0
debconf (developer): <-- INPUT high ttf-root-installer/blurb
debconf (developer): --> 30 question skipped
debconf (developer): <-- INPUT high ttf-root-installer/dldir
debconf (developer): --> 30 question skipped
debconf (developer): <-- GO 
debconf (developer): --> 0 ok
debconf (developer): <-- GET ttf-root-installer/dldir
debconf (developer): --> 0 
debconf (developer): <-- INPUT high ttf-root-installer/savedir
debconf (developer): --> 30 question skipped
debconf (developer): <-- GO 
debconf (developer): --> 0 ok
debconf (developer): <-- GET ttf-root-installer/savedir
debconf (developer): --> 0 
debconf (developer): starting /var/lib/dpkg/info/ttf-root-installer.postinst configure 
+ archive=ttf_fonts.tar.gz
+ db_get ttf-root-installer/dldir
+ _db_cmd GET ttf-root-installer/dldir
+ _db_internal_IFS= 	

+ IFS= 
+ printf %s\n GET ttf-root-installer/dldir
+ IFS= 	

+ IFS=
 read -r _db_internal_line
debconf (developer): <-- GET ttf-root-installer/dldir
debconf (developer): --> 0 
+ RET=
+ return 0
+ LOCALCOPY=
+ db_get ttf-root-installer/savedir
+ _db_cmd GET ttf-root-installer/savedir
+ _db_internal_IFS= 	

+ IFS= 
+ printf %s\n GET ttf-root-installer/savedir
+ debconf (developer): <-- GET ttf-root-installer/savedir
IFS= 	

+ IFS=
 read -r _db_internal_line
debconf (developer): --> 0 
+ RET=
+ return 0
+ SAVEDIR=
+ test ! -f /var/cache/ttf-root-installer
+ echo
+ tr [:upper:] [:lower:]
+ test x != xnone
+ pwd
+ savdir=/
+ mktemp -d
+ tmpdir=/tmp/tmp.LG7ux68bWG
+ cd /tmp/tmp.LG7ux68bWG
+ test -z
+ wget --continue --tries=1 --dns-timeout=20 --connect-timeout=20 --read-timeout=300 -q --directory-prefix . -c http://root.cern.ch/download/ttf/ttf_fonts.tar.gz
dpkg: error processing package ttf-root-installer (--configure):
 subprocess installed post-installation script returned error exit status 5
D000001: ensure_diversions: same, skipping
Errors were encountered while processing:
 ttf-root-installer


Trying to reproduce it manually:

$ wget --continue --tries=1 --dns-timeout=20 --connect-timeout=20 --read-timeout=300 -q --directory-prefix . -c http://root.cern.ch/download/ttf/ttf_fonts.tar.gz
$ echo $?
5

It all seems to be a issue with the certificates:

# wget --continue --tries=1 --dns-timeout=20 --connect-timeout=20 --read-timeout=300  --directory-prefix . -c http://root.cern.ch/download/ttf/ttf_fonts.tar.gz
--2014-12-29 19:31:16--  http://root.cern.ch/download/ttf/ttf_fonts.tar.gz
Resolving root.cern.ch (root.cern.ch)... 128.142.172.96
Connecting to root.cern.ch (root.cern.ch)|128.142.172.96|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://root.cern.ch/download/ttf/ttf_fonts.tar.gz [following]
--2014-12-29 19:31:16--  https://root.cern.ch/download/ttf/ttf_fonts.tar.gz
Connecting to root.cern.ch (root.cern.ch)|128.142.172.96|:443... connected.
ERROR: The certificate of ‘root.cern.ch’ is not trusted.
ERROR: The certificate of ‘root.cern.ch’ hasn't got a known issuer.

Effectively, browsing https://root.cern.ch/ gives a SSL warning error.


http://root.cern.ch/download/ttf/ttf_fonts.tar.gz is redirecting to https://root.cern.ch/download/ttf/ttf_fonts.tar.gz
and https://root.cern.ch is signed by a CA (CERN Grid Certification Authority) that is not trusted by Debian.




-- System Information:
Versions of packages ttf-root-installer depends on:
ii  debconf       1.5.55
ii  wget          1.15-1+b1
ii  xfonts-utils  1:7.7+2

ttf-root-installer recommends no packages.

ttf-root-installer suggests no packages.

-- debconf information:
* ttf-root-installer/dldir:
  ttf-root-installer/baddldir:
* ttf-root-installer/blurb:
* ttf-root-installer/savedir:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 883 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/debian-science-maintainers/attachments/20141229/c59942ba/attachment-0001.sig>

More information about the debian-science-maintainers mailing list