Bug#549936: Bug#548126: pu: package opensaml2/2.0-2+lenny1

[Russ Allbery]

Sorry to have not been able to help with this more.  I'm still recovering
from a particularly nasty bout of stomach flu.  :/

Faidon Liambotis <paravoid at debian.org> writes:
> Florian Weimer wrote:

>> (It's odd that the original package FTBFSes, but well...)

> It is, I was wondering myself. It had multiple serious bugs actually:
>  - tries to generate the certificates with openssl without having
>    openssl as a build-dep,
>  - even if it's installed (i.e. in an unclean chroot), they are
>    generated in /etc/shibboleth instead of DESTDIR,
>  - then, debian/rules tries to rm (without -f) them in debian/tmp/, but
>    they were never there so it fails/FTBFS.

This is disturbing to me as well.  I build all packages in a chroot as a
matter of course, and didn't have any trouble with the build.  The keys
that were generated as part of the normal build process aren't
particularly useful in the context of a Debian package, so when I saw them
being generated, I just removed them, but I thought they were being
generated under DESTDIR.

I'm not at all sure why you were seeing different results than I was.  I
will definitely investigate.  It may be that I missed something because I
was building in a chroot as a non-root user and therefore writing to
/etc/shibboleth in the chroot was failing and I didn't notice that error.

Thank you very much for fixing this, and as soon as I have focus again,
I'll make sure that the packages in unstable are also fixed if needed.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>