Bug#942758: Acknowledgement (shibboleth-sp-utils: shibd segfault after CredentialResolver certificate is set)

Miloslav Hůla miloslav.hula at gmail.com
Fri Oct 25 09:54:40 BST 2019

Hi Etienne,

>> I found, that some old packages from
>> http://pkg.switch.ch/switchaai/debian repository has been
>> installed.
> Hi Miloslav,
> Thanks for your report. I'm the maintainer of this repository.
>> Namely:
>> opensaml-schemas:amd64 (3.0.1-1switchaai1~stretch1)
>> libxml-security-c20:amd64 (2.0.2-3switchaai1~stretch1)
>> xmltooling-schemas:amd64 (3.0.4-1switchaai1~stretch1)
>> I used to use the repo with Debian 8 and 9. When I uninstalled them
>> and reinstalled shibboleth-sp-utils with dependecies from official
>> Buster repo, everything works.
> Did something go wrong when upgrading from Debian 9 to 10 while having
> the SWITCHaai repository enabled? From what you write, I have the
> impression that packages from Buster did not properly replace ones
> from Stretch (coming from pkg.switch.ch).

Yes, something went wrong. I updated OS on last Stretch packages. Then 
changed repo names to Buster and dist-upgraded. Everything went fine but 
later I found segfaults. Then I created a fresh one virtual machine with 
Buster and there the shibd started just fine.

When I found the switchaai1~stretch1 packages I tried to update them, 
apt-get update/upgrade did nothing. Even upgrade to specific version did 
not go well due to some missing/colliding dependencies.  So I had to 
purge them, and purged libapache2-mod-shib as a consequence. Then 
installed libapache2-mod-shib and everything works just fine.

Regards, Miloslav

More information about the Pkg-shibboleth-devel mailing list