P11-kit and security chain upgrade is now available in [testing]

p11-kit
manual-intervention
firefox

(brli) #1

For our testers:
todays upgrade in our [testing] repository requires manual intervention
https://www.archlinux.org/news/ca-certificates-utils-20170307-1-upgrade-requires-manual-intervention/

please test and report any issues


Big upgrade of xorg, kernel, and graphics drivers that include important changes, is now available in [testing]
(brli) #2

besides the intervention

please test this bug:


(Luca Giambonini) #3

:: lib32-p11-kit: requires p11-kit=0.23.2


(Rémy Epke) #5

No ca-certificates-anything at all in the first update run (only FF, sqlite and nano), could be the mirrors were still busy syncing as on second attempt a minute or two later I did see cert stuff:

:: Synchronizing package databases...
 testing                                                                                                       672.3 KiB  3.46M/s 00:00 [##################################################################################] 100%
 lib32                                                                                                          98.9 KiB  4.83M/s 00:00 [##################################################################################] 100%
 core                                                                                                         1117.2 KiB  5.57M/s 00:00 [##################################################################################] 100%
 desktop                                                                                                      1000.1 KiB  6.10M/s 00:00 [##################################################################################] 100%
 gtk                                                                                                           120.5 KiB  6.92M/s 00:00 [##################################################################################] 100%
:: Starting full system upgrade...
resolving dependencies...
looking for conflicting packages...

Packages (5) ca-certificates-20170307-1  ca-certificates-mozilla-3.32-3  ca-certificates-utils-20170307-1  nss-3.32-3  p11-kit-0.23.8-1

Total Download Size:   2.15 MiB
Total Installed Size:  9.85 MiB
Net Upgrade Size:      0.88 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages ...
 p11-kit-0.23.8-1-x86_64                                                                                       399.9 KiB  3.10M/s 00:00 [##################################################################################] 100%
 ca-certificates-utils-20170307-1-x86_64                                                                         6.2 KiB  0.00B/s 00:00 [##################################################################################] 100%
 ca-certificates-mozilla-3.32-3-x86_64                                                                         378.3 KiB  5.28M/s 00:00 [##################################################################################] 100%
 ca-certificates-20170307-1-x86_64                                                                             800.0   B  0.00B/s 00:00 [##################################################################################] 100%
 nss-3.32-3-x86_64                                                                                            1417.1 KiB  5.07M/s 00:00 [##################################################################################] 100%
(5/5) checking keys in keyring                                                                                                          [##################################################################################] 100%
(5/5) checking package integrity                                                                                                        [##################################################################################] 100%
(5/5) loading package files                                                                                                             [##################################################################################] 100%
(5/5) checking for file conflicts                                                                                                       [##################################################################################] 100%
error: failed to commit transaction (conflicting files)
ca-certificates-utils: /etc/ssl/certs/ca-certificates.crt exists in filesystem
Errors occurred, no packages were upgraded.

Removed the package, ran again, success.


(Rémy Epke) #6

Seven add-ons installed:

Of these, only Ghostery and TinEye seem updated, the others show a big, bright yellow LEGACY tag.


(Rémy Epke) #7

Okay, BOTH my posts were replies to brli’s posts, but only one of them is marked as such.
I don’t know why I even bother with this crappy site anymore…


(Neofytos Kolokotronis) #8

All fine here following the instructions on Arch. :clap:

Do you plan to move this to stable before or after the xorg move?


(brli) #9

I know…was trying to verify the functionality only, not yet checking the lib32 part, would do it today.

\done/


(tom) #10

the arch guide was working for me but i think the --force switch does the same and this case is a good reason for using it


(Bobby Rong) #11

No problems here after following the instructions.

So installing lib32-p11-kit will downgrade p11-kit ?

[root@chakra bobby285271]# LC_ALL=C sudo pacman -Si lib32-p11-kit 
Repository     : lib32
Name           : lib32-p11-kit
Version        : 0.23.2-1
Description    : Library to work with PKCS#11 modules (32-bit)
Architecture   : x86_64
URL            : http://p11-glue.freedesktop.org
Licenses       : BSD
Groups         : None
Provides       : None
Depends On     : lib32-gcc-libs  lib32-libtasn1  lib32-libffi  p11-kit=0.23.2
Optional Deps  : None
Conflicts With : None
Replaces       : None
Download Size  : 175.36 KiB
Installed Size : 877.00 KiB
Packager       : AlmAck <almack@chakralinux.org>
Build Date     : Mon Jan 23 07:33:51 2017
Validated By   : MD5 Sum  SHA256 Sum  Signature
[root@chakra bobby285271]# LC_ALL=C sudo pacman -S lib32-p11-kit
resolving dependencies...
looking for conflicting packages...

Package (6)           Old Version  New Version  Net Change  Download Size

core/lib32-gcc-libs                6.3.1-3       49.75 MiB      11.47 MiB
lib32/lib32-glibc                  2.25-1        14.20 MiB       2.87 MiB
lib32/lib32-libffi                 3.2.1-1        0.08 MiB       0.02 MiB
lib32/lib32-libtasn1               4.9-1          0.09 MiB       0.03 MiB
core/p11-kit          0.23.8-1     0.23.2-1      -1.61 MiB       0.25 MiB
lib32/lib32-p11-kit                0.23.2-1       0.86 MiB       0.17 MiB

Total Download Size:   14.82 MiB
Total Installed Size:  66.60 MiB
Net Upgrade Size:      63.38 MiB

:: Proceed with installation? [Y/n] n

Does it mean that lib32-p11-kit, version 0.23.8 should be packaged or we can simply change the PKGBUILD so that lib32-p11-kit no longer needs p11-kit with a same version, like Arch (Here is Arch 's PKGBUILD)? You see: p11-kit on Arch and lib32-p11-kit on Arch. :joy::joy::joy:



(Neofytos Kolokotronis) #12

Remember to push it to the repos (git and package)! lib32-p11-kit 0.23.8 is still not in testing.


(brli) #14

Not yet? I’ve uploaded it there…a few hours ago IIRC.

Edit: yeah, I suppose this is UTC time?


(Bobby Rong) #15

Great! I see that now, thanks! :grin::grin::grin:

[root@chakra bobby285271]# LC_ALL=C sudo pacman -Si lib32-p11-kit       
Repository     : testing
Name           : lib32-p11-kit                                                                                                                               
Version        : 0.23.8-1                                                                                                                                    
Description    : Provides a way to load and enumerate PKCS#11 modules (32-bit)                                                                               
Architecture   : x86_64                                                                                                                                      
URL            : https://p11-glue.freedesktop.org                                                                                                            
Licenses       : BSD                                                                                                                                         
Groups         : None                                                                                                                                        
Provides       : None                                                                                                                                        
Depends On     : lib32-glibc  lib32-libtasn1  lib32-libffi  p11-kit                                                                                          
Optional Deps  : None                                                                                                                                        
Conflicts With : None                                                                                                                                        
Replaces       : None                                                                                                                                        
Download Size  : 332.50 KiB                                                                                                                                  
Installed Size : 3216.00 KiB                                                                                                                                 
Packager       : Chaoting Liu <brli@chakralinux.org>
Build Date     : Tue Aug 29 16:13:19 2017
Validated By   : MD5 Sum  SHA256 Sum  Signature

Repository     : lib32
Name           : lib32-p11-kit
Version        : 0.23.2-1
Description    : Library to work with PKCS#11 modules (32-bit)
Architecture   : x86_64
URL            : http://p11-glue.freedesktop.org
Licenses       : BSD
Groups         : None
Provides       : None
Depends On     : lib32-gcc-libs  lib32-libtasn1  lib32-libffi  p11-kit=0.23.2
Optional Deps  : None
Conflicts With : None
Replaces       : None
Download Size  : 175.36 KiB
Installed Size : 877.00 KiB
Packager       : AlmAck <almack@chakralinux.org>
Build Date     : Mon Jan 23 07:33:51 2017
Validated By   : MD5 Sum  SHA256 Sum  Signature
[root@chakra bobby285271]# LC_ALL=C sudo pacman -S lib32-p11-kit
resolving dependencies...
looking for conflicting packages...

Package (4)            New Version  Net Change  Download Size

lib32/lib32-glibc      2.25-1        14.20 MiB       2.87 MiB
lib32/lib32-libffi     3.2.1-1        0.08 MiB       0.02 MiB
lib32/lib32-libtasn1   4.9-1          0.09 MiB       0.03 MiB
testing/lib32-p11-kit  0.23.8-1       3.14 MiB       0.32 MiB

Total Download Size:    3.25 MiB
Total Installed Size:  17.52 MiB

:: Proceed with installation? [Y/n] 

(kepszlok) #16

“Of these, only Ghostery and TinEye seem updated, the others show a big,
bright yellow LEGACY tag.”

Firefox will drop their legacy plugin API, while many of the plugins did
not updated yet…

··· 2017-08-28 22:12 GMT+02:00 Rémy Epke :

ReemZ
http://email.m.chakralinux.org/c/eJx1jTsOwyAYg08DI-KZtANDl94DCAkICIiA1Ob0_S9QyZYHy583zRfLjcBRj9qiQ_y9KK4gnvLBkaSuljLPOL7EBZO6yfGcH1L7gYP2lslVmF2pnUkrKF2NtZwCz29UWoazDmO0C4kXAEF_YdBNcPe-3Ljr5Nt155rg_ygmZgLDH8uBN4M Rémy
Epke
http://email.m.chakralinux.org/c/eJx1jTsOwyAYg08DI-KZtANDl94DCAkICIiA1Ob0_S9QyZYHy583zRfLjcBRj9qiQ_y9KK4gnvLBkaSuljLPOL7EBZO6yfGcH1L7gYP2lslVmF2pnUkrKF2NtZwCz29UWoazDmO0C4kXAEF_YdBNcPe-3Ljr5Nt155rg_ygmZgLDH8uBN4M
tester
August 28

Seven add-ons installed:

Of these, only Ghostery and TinEye seem updated, the others show a big,
bright yellow LEGACY tag.

Visit Message
http://email.m.chakralinux.org/c/eJx1jjEOwyAUQ08TNiL4CTQZGLr0HkBogiCACEhtT9-_dapky4OtJ28KpAE9Ea9aLt4O8JACBMY6LzDMzObz7Mm392gPHaqOPvXXmOtODiXMKsTCGcgnMO1AmIk_3WRuUvKFrTOJ6mitXMN0RyDqLwy7hi6c0-Ab1Wmjl7O9OopDn2gve9Wb-72TpKrgyvWJOeDL_dQ-joj_Akn5QkY
or reply to this email to respond.

In Reply To
brli
http://email.m.chakralinux.org/c/eJx1TUkOwyAQe004RhVb4MChl_5jWBIQEBAhUtvXdz5QyZYtWba9odJSYCSZ2XpyC31JQQWK5oou_OFarfeZ5md1EfKAks77vbZxkGiEcny3FvxO0YQQYNOwSaWlZsx7SYqJc_ZrYU8cRPwdw-xG2lESGSaHfn1Ly3h_VEhlxd4P0wg3qQ
contributor
August 28
besides the intervention please test this bug:

Visit Message
http://email.m.chakralinux.org/c/eJx1jjEOwyAUQ08TNiL4CTQZGLr0HkBogiCACEhtT9-_dapky4OtJ28KpAE9Ea9aLt4O8JACBMY6LzDMzObz7Mm392gPHaqOPvXXmOtODiXMKsTCGcgnMO1AmIk_3WRuUvKFrTOJ6mitXMN0RyDqLwy7hi6c0-Ab1Wmjl7O9OopDn2gve9Wb-72TpKrgyvWJOeDL_dQ-joj_Akn5QkY
or reply to this email to respond.

To unsubscribe from these emails, click here
http://email.m.chakralinux.org/c/eJx1j0uKxDAMRE-TLEMk27K18KI3fQ_bsRKTL_lAz5x-PAdoEDyKEqXS4JEiBtUWf-9HSQ2-yaCpYO2w0X3a1_XZyv3TpSnMZ1jK9ny6_RzbyVuoO0EZZBOFHZA2TlOiNHAcmKld_HTfx9WoVw2s8zWsenkNZal8tuuJVzpLzFWJggiae47grHWOksXemgEo5ww52OiSAJMWJoqAID0yiUhmo0SwPf2cj-t32ef6zPh_o6st_gDXO0yj
.


(brli) made this topic public #17

(totte) split this topic #18

4 posts were merged into an existing topic: Manual intervention is needed for upgrading the ca-certificates-utils package to version 20170307


(brli) closed #19

This topic was automatically closed 170 days after the last reply. New replies are no longer allowed.