Bug#882981: ValueError: error while getting hash (not enough entropy?)

[Moritz Schlarb]

Hi Chris,

On 28.11.2017 14:53, Chris Lamb wrote:
> Hi Moritz,
> 
> Thank you for the bug report. I just went to reproduce this,
> but:
> 
>   $ curl -I http://repos.s3.amazonaws.com/tarballs/cfengine-3.10.2.tar.gz
>   HTTP/1.1 403 Forbidden
>   x-amz-request-id: 8C7916BA9F5E9381
>   x-amz-id-2: 8yBN+i0wVQwUBR1r2A8mfPJFi2k+lDnyEUtjk3sPUGtYP2mRnVCBqqHMqRN4PHhmdGLz4Q1Pebc=
>   Content-Type: application/xml
>   Transfer-Encoding: chunked
>   Date: Tue, 28 Nov 2017 13:52:27 GMT
>   Server: AmazonS3

Ah, apparently that link got line-broken badly - you are missing a
prefix of "cfengine-package-" on that URL. ;)

> I then went to the download page for cfengine:
> 
>  https://cfengine.com/product/cfengine-enterprise-free-25/
> 
> .. but can't quite find the corresponding file! There is a tarball
> labelled "masterfiles" but I think that is something different.

Yes, their whole download/releases page is basically another bug
(regarding the debian/watch file:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873698). You can find
the link on https://cfengine.com/product/community/ (given a browser
that does JavaScript).

Incidentally, I stumbled upon this issue in diffoscope when I wanted to
point out the differences between these two tarballs in my response to
Christoph at Message #20 in
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873698#20 .

Best regards,
-- 
Moritz Schlarb
Unix-Gruppe | Systembetreuung
Zentrum für Datenverarbeitung
Johannes Gutenberg-Universität Mainz
Raum 01-331 - Tel. +49 6131 39-29441
OpenPGP Fingerprint: DF01 2247 BFC6
5501 AFF2 8445 0C24 B841 C7DD BAAF
-------------- next part --------------
A non-text attachment was scrubbed...
Name: schlarbm.vcf
Type: text/x-vcard
Size: 367 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20171128/752b8d38/attachment.vcf>