Bug#1060648: libmodule-signature-perl: obsolete pool.sks-keyservers.net yields a 20-second timeout in DNS resolution and a possible failure

[Vincent Lefevre]

Package: libmodule-signature-perl
Version: 0.88-2
Severity: normal
Tags: upstream
Forwarded: https://rt.cpan.org/Public/Bug/Display.html?id=151098

When I used "cpan -i ...", I could see several timeouts in the
strace output:

725098 00:37:58.837653 connect(3, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("192.168.1.1")}, 16) = 0
725098 00:37:58.837679 poll([{fd=3, events=POLLOUT}], 1, 0) = 1 ([{fd=3, revents=POLLOUT}])
725098 00:37:58.837692 sendto(3, "\30\330\1\0\0\1\0\0\0\0\0\0\4pool\16sks-keyservers\3net\0\0\1\0\1", 41, MSG_NOSIGNAL, NULL, 0) = 41
725098 00:37:58.837733 poll([{fd=3, events=POLLIN}], 1, 5000) = 0 (Timeout)
725098 00:38:03.843214 socket(AF_INET6, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 4
725098 00:38:03.843459 setsockopt(4, SOL_IPV6, IPV6_RECVERR, [1], 4) = 0
725098 00:38:03.843704 connect(4, {sa_family=AF_INET6, sin6_port=htons(53), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "2a02:8428:1b1d:4d01::1", &sin6_addr), sin6_scope_id=0}, 28) = 0
725098 00:38:03.843826 poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
725098 00:38:03.843846 sendto(4, "\30\330\1\0\0\1\0\0\0\0\0\0\4pool\16sks-keyservers\3net\0\0\1\0\1", 41, MSG_NOSIGNAL, NULL, 0) = 41
725098 00:38:03.844005 poll([{fd=4, events=POLLIN}], 1, 5000) = 0 (Timeout)
725098 00:38:08.849500 poll([{fd=3, events=POLLOUT}], 1, 0) = 1 ([{fd=3, revents=POLLOUT}])
725098 00:38:08.849728 sendto(3, "\30\330\1\0\0\1\0\0\0\0\0\0\4pool\16sks-keyservers\3net\0\0\1\0\1", 41, MSG_NOSIGNAL, NULL, 0) = 41
725098 00:38:08.849986 poll([{fd=3, events=POLLIN}], 1, 5000) = 0 (Timeout)
725098 00:38:13.855521 poll([{fd=4, events=POLLOUT}], 1, 0) = 1 ([{fd=4, revents=POLLOUT}])
725098 00:38:13.855577 sendto(4, "\30\330\1\0\0\1\0\0\0\0\0\0\4pool\16sks-keyservers\3net\0\0\1\0\1", 41, MSG_NOSIGNAL, NULL, 0) = 41
725098 00:38:13.855728 poll([{fd=4, events=POLLIN}], 1, 5000) = 0 (Timeout)
725098 00:38:18.861210 close(3)         = 0
725098 00:38:18.861470 close(4)         = 0

i.e. 20 seconds in total.

This is due to the DNS resolution of pool.sks-keyservers.net, which
no longer exists:

  https://unix.stackexchange.com/questions/656205/sks-keyservers-gone-what-to-use-instead

The DNS records have no longer been provided since 2021-06-21!

On one of my machines, the installation with "cpan -i" even fails
because subkeys are missing (I don't know why there is a difference
between machines, but perhaps a correct keyserver selected by this
module would solve the issue).

I've just reported the upstream bug.

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.6.9-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libmodule-signature-perl depends on:
ii  perl  5.38.2-2

Versions of packages libmodule-signature-perl recommends:
ii  gnupg  2.2.40-1.1

libmodule-signature-perl suggests no packages.

-- no debconf information

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)