From noreply at release.debian.org Wed Apr 2 05:40:04 2025 From: noreply at release.debian.org (Debian testing autoremoval watch) Date: Wed, 02 Apr 2025 04:40:04 +0000 Subject: shibboleth-sp is marked for autoremoval from testing Message-ID: shibboleth-sp 3.5.0+dfsg-2 is marked for autoremoval from testing on 2025-05-01 It (build-)depends on packages with these RC bugs: 466117: libfcgi-dev: strange copyright header in /usr/include/fcgios.h https://bugs.debian.org/466117 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl From noreply at release.debian.org Wed Apr 2 05:40:04 2025 From: noreply at release.debian.org (Debian testing autoremoval watch) Date: Wed, 02 Apr 2025 04:40:04 +0000 Subject: shibboleth-resolver is marked for autoremoval from testing Message-ID: shibboleth-resolver 3.1.0-3 is marked for autoremoval from testing on 2025-05-01 It (build-)depends on packages with these RC bugs: 466117: libfcgi-dev: strange copyright header in /usr/include/fcgios.h https://bugs.debian.org/466117 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl From noreply at release.debian.org Tue Apr 22 05:39:45 2025 From: noreply at release.debian.org (Debian testing autoremoval watch) Date: Tue, 22 Apr 2025 04:39:45 +0000 Subject: shibboleth-sp is marked for autoremoval from testing Message-ID: shibboleth-sp 3.5.0+dfsg-2 is marked for autoremoval from testing on 2025-05-14 It (build-)depends on packages with these RC bugs: 1092774: libfcgi: CVE-2025-23016 https://bugs.debian.org/1092774 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl From noreply at release.debian.org Tue Apr 22 05:39:49 2025 From: noreply at release.debian.org (Debian testing autoremoval watch) Date: Tue, 22 Apr 2025 04:39:49 +0000 Subject: shibboleth-resolver is marked for autoremoval from testing Message-ID: shibboleth-resolver 3.1.0-3 is marked for autoremoval from testing on 2025-05-14 It (build-)depends on packages with these RC bugs: 1092774: libfcgi: CVE-2025-23016 https://bugs.debian.org/1092774 For more information on the autoremoval process, including hints to prevent autoremoval can be found on the wiki: https://wiki.debian.org/Autoremoval This mail is generated by: https://salsa.debian.org/release-team/release-tools/-/blob/master/mailer/mail_autoremovals.pl Autoremoval data is generated by: https://salsa.debian.org/qa/udd/-/blob/master/udd/testing_autoremovals_gatherer.pl From owner at bugs.debian.org Sun Apr 27 11:06:03 2025 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Sun, 27 Apr 2025 10:06:03 +0000 Subject: Processed: opensaml: autopkgtest regression: certificate name was not acceptable References: Message-ID: Processing control commands: > found -1 3.2.1-3 Bug #1104213 [src:opensaml] opensaml: autopkgtest regression: certificate name was not acceptable Marked as found in versions opensaml/3.2.1-3. -- 1104213: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104213 Debian Bug Tracking System Contact owner at bugs.debian.org with problems From elbrus at debian.org Sun Apr 27 11:03:44 2025 From: elbrus at debian.org (Paul Gevers) Date: Sun, 27 Apr 2025 12:03:44 +0200 Subject: Bug#1104213: opensaml: autopkgtest regression: certificate name was not acceptable Message-ID: Source: opensaml Version: 3.3.1-1 Control: found -1 3.2.1-3 Severity: serious User: debian-ci at lists.debian.org Usertags: regression Dear maintainer(s), Your package has an autopkgtest, great. However, it fails most of the time since recently (mid April 2025), including on stable. Can you please investigate the situation and fix it? I copied some of the output at the bottom of this report. If I'm not mistaken, the test uses an external website and something's wrong with it. The release team has announced [1] that failing autopkgtest on amd64 and arm64 are considered RC in testing. More information about this bug and the reason for filing it can be found on https://wiki.debian.org/ContinuousIntegration/RegressionEmailInformation Paul [1] https://lists.debian.org/debian-devel-announce/2019/07/msg00002.html https://ci.debian.net/packages/o/opensaml/testing/amd64/60285619/ 230s FAIL: samltest 230s ============== 230s 230s Running cxxtest tests (316 tests)......... 230s In SAML1AssertionTest::testSignature: 230s /tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1AssertionTest.h:40: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125 230s s 230s In SAML1RequestTest::testSignature: 230s /tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1RequestTest.h:43: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125 230s s 230s In SAML1ResponseTest::testSignature: 230s /tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/signature/SAML1ResponseTest.h:43: Warning: Test skipped: Waiting for https://shibboleth.atlassian.net/browse/CPPOST-125 230s s..1745747138 ERROR XMLTooling.TrustEngine.PKIX : certificate name was not acceptable 230s ...............................................1745747138 ERROR OpenSAML.MessageDecoder.SAML1Artifact : replay detected of artifact (AAGmvK93AsWGNdEuCU9RCaIIqlHJZpEvMgKUt7BTheNeMRZaKk/tfU8D 230s ) 230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay detected of message ID (_09c29477940b4b626cfd32734a15d65d) 230s .1745747138 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction : unacceptable AudienceRestrictionCondition in assertion ( 230s https://sp.example.org 230s ) 230s .................................................................................................................................................................................................................................................1745747138 ERROR OpenSAML.MessageDecoder.SAML2Artifact : replay detected of artifact (AAQAAaa8r3cCxYY10S4JT1EJogiqUclmKc7/9hsVQNvhzsClf9x7ubIbtOY= 230s ) 230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay detected of message ID (_267d14254f9d1deadf73a6d7aef00c47) 230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay detected of message ID (_9c6f9775985e772673263178f131647c) 230s .1745747138 ERROR OpenSAML.SecurityPolicyRule.MessageFlow : replay detected of message ID (_9f372a1b23ff92e96ec27989d4a70821) 230s .1745747178 ERROR OpenSAML.MetadataProvider.XML : metadata instance was invalid at time of acquisition 230s 1745747179 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 0 seconds 230s 1745747179 WARN OpenSAML.MetadataProvider.XML : trying backup file, exception loading remote resource: Metadata instance was invalid at time of acquisition. 230s 1745747179 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: unable to open primary document entity '/tmp/autopkgtest-lxc.g3n9py65/downtmp/build.Tha/src/samltest/data/saml2/metadata/InCommon-metadata.xml.bck' 230s 1745747179 ERROR OpenSAML.MetadataProvider.XML : error while loading resource (../samltest/data/saml2/metadata/InCommon-metadata.xml.bck): XML error(s) during parsing, check log for specifics 230s 230s In XMLMetadataProviderTest::testHTTPProvider: 230s saml2/metadata/XMLMetadataProviderTest.h:56: Error: Test failed: XML error(s) during parsing, check log for specifics 230s In XMLMetadataProviderTest::testBadSig: 230s saml2/metadata/XMLMetadataProviderTest.h:93: Error: Test failed: Unable to access local file (../samltest/data/saml2/metadata/InCommon-metadata.xml.bck) 230s 1745747179 ERROR OpenSAML.MetadataProvider.Chaining : MetadataProvider child element of type MetadataFilter ignored 230s 1745747179 ERROR OpenSAML.MetadataProvider.Chaining : MetadataProvider child element of type MetadataFilter ignored 230s . 230s In XMLMetadataProviderTest::testXMLProvider: 230s saml2/metadata/XMLMetadataProviderTest.h:134: Error: Test failed: Unable to access local file (../samltest/data/saml2/metadata/InCommon-metadata.xml.bck) 230s In XMLMetadataProviderTest::testXMLWithExcludes: 230s saml2/metadata/XMLMetadataProviderTest.h:171: Error: Test failed: Unable to access local file (../samltest/data/saml2/metadata/InCommon-metadata.xml.bck) 230s In XMLMetadataProviderTest::testXMLWithIncludes: 230s saml2/metadata/XMLMetadataProviderTest.h:197: Error: Test failed: Unable to access local file (../samltest/data/saml2/metadata/InCommon-metadata.xml.bck) 230s 1745747179 WARN OpenSAML.SecurityPolicyRule.AudienceRestriction : unacceptable AudienceRestriction in assertion ( 230s https://sp.example.org 230s ) 230s 1745747179 WARN OpenSAML.SecurityPolicyRule.BearerConfirmation : bearer confirmation failed on lack of request/response correlation 230s .. 230s Failed 5 and Skipped 3 of 316 tests -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature.asc Type: application/pgp-signature Size: 495 bytes Desc: OpenPGP digital signature URL: From owner at bugs.debian.org Sun Apr 27 15:57:01 2025 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Sun, 27 Apr 2025 14:57:01 +0000 Subject: Processed: bug 1104213 is forwarded to https://shibboleth.atlassian.net/browse/CPPOST-127 References: <1745765665-718-bts-wferi@debian.org> Message-ID: Processing commands for control at bugs.debian.org: > forwarded 1104213 https://shibboleth.atlassian.net/browse/CPPOST-127 Bug #1104213 [src:opensaml] opensaml: autopkgtest regression: certificate name was not acceptable Set Bug forwarded-to-address to 'https://shibboleth.atlassian.net/browse/CPPOST-127'. > thanks Stopping processing here. Please contact me if you need assistance. -- 1104213: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104213 Debian Bug Tracking System Contact owner at bugs.debian.org with problems From ftpmaster at ftp-master.debian.org Sun Apr 27 23:02:05 2025 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Sun, 27 Apr 2025 22:02:05 +0000 Subject: Processing of opensaml_3.3.1-2_source.changes Message-ID: opensaml_3.3.1-2_source.changes uploaded successfully to localhost along with the files: opensaml_3.3.1-2.dsc opensaml_3.3.1-2.debian.tar.xz opensaml_3.3.1-2_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org) From ftpmaster at ftp-master.debian.org Sun Apr 27 23:04:38 2025 From: ftpmaster at ftp-master.debian.org (Debian FTP Masters) Date: Sun, 27 Apr 2025 22:04:38 +0000 Subject: opensaml_3.3.1-2_source.changes ACCEPTED into unstable Message-ID: Thank you for your contribution to Debian. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Apr 2025 22:47:08 +0200 Source: opensaml Architecture: source Version: 3.3.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Shib Team Changed-By: Ferenc W?gner Closes: 1104213 Changes: opensaml (3.3.1-2) unstable; urgency=medium . * [963c684] Update Standards-Version to 4.7.2 (no changes required) * [c09387e] New patch: Use the new InCommon metadata source (Closes: #1104213) Checksums-Sha1: 9e28cf8c6b3f8f71fcf66a20208c503461c472ae 2698 opensaml_3.3.1-2.dsc 1dd031fd1cfffe226ac53dcbb41d598f9105ced9 21988 opensaml_3.3.1-2.debian.tar.xz aa6c82b61e7369e2cdec94d63f3aa07375a0ba70 12347 opensaml_3.3.1-2_amd64.buildinfo Checksums-Sha256: 52840f02ba0c675a611a2b5bb41a13967ac76b352d2f3730c413fff0d859642a 2698 opensaml_3.3.1-2.dsc 8a7df9bdf8a7751d9ddf0a9d14ce76041fa5060f894a4d2c7b89c951016987c4 21988 opensaml_3.3.1-2.debian.tar.xz b4ddfc5304ed330379f8449b3aa40d1587c794e1d31fa3b3d93f43ea34b86f24 12347 opensaml_3.3.1-2_amd64.buildinfo Files: fa316b6c8eeb4891b549fc16577bbdca 2698 libs optional opensaml_3.3.1-2.dsc 53fc68bc64274baca0f54c70bf2b68a6 21988 libs optional opensaml_3.3.1-2.debian.tar.xz 8d10e8ca8d6a7738e7e01af4005e39d2 12347 libs optional opensaml_3.3.1-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwddEx0RNIUL7eugtOsj3Fkd+2yMFAmgOmtcACgkQOsj3Fkd+ 2yM/Xg//dKrB/XOE1Ar1hOBjUSI8Q5uswst9tuiiti4QMoCXYx8kv9+3nexL34IQ dG+r0jTDFD03ee9MuxVD70lNbC+KMjRPhWzbNdfwswIGKIKpSm6Wgm40lmk4W1t6 +0Fly2iJdVZtmQsEEO5gZGkqDRltfC9Espshl0jYN+r8spx1l9t3H1OogRPwvbY1 wbOB9NS2euFkQa9U6ZODCjZ9SAvGW8FgiS/v4Jz8uQv4TNvyItKfFbx0ox01LQ14 IywO69uDWcLRKlOW7JU+jG0Xm93LpNyo2rPSCBf7TyBbSdY9f/tjR+M1ejqBLcSK 9YXI0cKpHGywuQu+oD4Fu6o4IQr7sqvCnBkKkAbzYUaVU112X77U9Pq42xeyYHi0 SqZOJYeaiulk6mEvNQEqBLMcDj//ANXryHuoaxNt0BCWusNJLORhekBfWM8k2M66 SsUzp7ZrnzqzD9USzISlGwoqhoy0s5izuStDSbI33T+/nXAY3rA4gz989h5sUUIu D4PG/kW3iOQlgFZSP/gvMkFQ/yCwo9feSL4OSDX0eEuIJezJSEHjHs7K16KPShio 0xqJPPSIj7XAy09iGrPq+BFYARQqs+6LGvjVmlZkKxAZs9wS77pZU0YKluXUkDDv speb4/FwnoinIEVWbK++FCJIw2/r1S4bVYDy5xJYs/r5wiMrb8E= =1j7X -----END PGP SIGNATURE----- -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 228 bytes Desc: not available URL: From owner at bugs.debian.org Sun Apr 27 23:06:02 2025 From: owner at bugs.debian.org (Debian Bug Tracking System) Date: Sun, 27 Apr 2025 22:06:02 +0000 Subject: Bug#1104213: marked as done (opensaml: autopkgtest regression: certificate name was not acceptable) References: Message-ID: Your message dated Sun, 27 Apr 2025 22:04:38 +0000 with message-id and subject line Bug#1104213: fixed in opensaml 3.3.1-2 has caused the Debian Bug report #1104213, regarding opensaml: autopkgtest regression: certificate name was not acceptable to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner at bugs.debian.org immediately.) -- 1104213: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104213 Debian Bug Tracking System Contact owner at bugs.debian.org with problems -------------- next part -------------- An embedded message was scrubbed... From: Paul Gevers Subject: opensaml: autopkgtest regression: certificate name was not acceptable Date: Sun, 27 Apr 2025 12:03:44 +0200 Size: 14031 URL: -------------- next part -------------- An embedded message was scrubbed... From: Debian FTP Masters Subject: Bug#1104213: fixed in opensaml 3.3.1-2 Date: Sun, 27 Apr 2025 22:04:38 +0000 Size: 6838 URL: