[Pkg-bazaar-maint] Bug#799582: bzr: Certificate error: hostname 'anonscm.debian.org' doesn't match

[Steve Cotton]

Package: bzr
Version: 2.6.0+bzr6602-3
Severity: minor
Tags: upstream
Justification: minor, the URL for the tevent package is returning 404 in a web browser

Bazaar is failing with the HTTPS certificates on anonscm.debian.org.  The bug
is already logged upstream, I'm logging it downstream because it's broken with
Debian's server, and because to finding the upstream bug (lack of SNI support)
isn't obvious from the error message.

$ debcheckout tevent
declared bzr repository at nosmart+http://bzr.debian.org/pkg-samba/tevent/unstable
bzr branch nosmart+http://bzr.debian.org/pkg-samba/tevent/unstable tevent ...
nosmart+http://bzr.debian.org/pkg-samba/tevent/unstable/ is permanently redirected to nosmart+https+urllib://anonscm.debian.org/bzr/pkg-samba/tevent/unstable/
bzr: ERROR: Certificate error: hostname 'anonscm.debian.org' doesn't match either of '*.alioth.debian.org', 'alioth.debian.org'

The anonscm server doesn't redirect to HTTPS for all packages, and
"debcheckout bzr" works.  I think the URL for the tevent package may be wrong,
so I'm logging this as severity "minor".

Steve

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.1.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages bzr depends on:
ii  python-bzrlib  2.6.0+bzr6602-3
pn  python:any     <none>

Versions of packages that provide python:any:
i   python 2.7.9-1

Versions of packages bzr recommends:
ii  python-gpgme  0.3-1+b1

Versions of packages bzr suggests:
pn  bzr-doc              <none>
ii  bzrtools             2.6.0-2
pn  python-bzrlib.tests  <none>

-- no debconf information