| armin76 | haha | 00:04 |
|---|---|---|
| armin76 | Ubulette: he works for Canonical, what do you expect?! :P | 00:05 |
| Ubulette | yeah, maybe | 00:15 |
| asac | Ubulette: hehe ... no idea. haven't seen that before | 00:35 |
| asac | looks like a bug | 00:37 |
| asac | http://www.allpeers.com/blog/2008/03/05/allpeers-lessons-learned/ | 09:38 |
| [reed] | asac: <timely> why isn't https://launchpad.net/ubuntu/gutsy/+package/ca-certificates part of ubuntu 7.10 out of the box? | 09:43 |
| Ubulette | this is a depends of openssl | 09:44 |
| [reed] | and openssl isn't installed by default? | 09:44 |
| Ubulette | and of balsa, mutt, fetchmail, .... maybe we can add it to firefox-3.0 deps | 09:45 |
| [reed] | please do | 09:45 |
| [reed] | it's causing problems like mozilla bug 407748 and others | 09:45 |
| ubotu | Mozilla bug 407748 in Breakpad Integration "Ubuntu 7.10 Crash report submission failed: problem with the SSL CA cert" [Normal,Resolved: invalid] http://bugzilla.mozilla.org/show_bug.cgi?id=407748 | 09:45 |
| Ubulette | done | 09:48 |
| [reed] | cool, thanks | 09:48 |
| [reed] | got a link to some commit that I can show to the people who are asking? | 09:49 |
| Ubulette | https://code.edge.launchpad.net/~mozillateam/firefox/firefox-3.0.head | 09:50 |
| Ubulette | that will be #194 | 09:50 |
| [reed] | k | 09:50 |
| [reed] | thx | 09:50 |
| Ubulette | hm, causing troubles.. maybe having troubles | 09:52 |
| Ubulette | fixed | 09:52 |
| asac | [reed], Ubulette: firefox depends is certainly the wrong place to fix this | 09:59 |
| Ubulette | why ? | 10:00 |
| Ubulette | same as mutt or balsa | 10:00 |
| Ubulette | we can also move that to libnss-1d | 10:00 |
| [reed] | asac: it really should be a part of the default install | 10:00 |
| [reed] | kinda silly that it isn't | 10:01 |
| [reed] | making it part of libnss would make sense | 10:01 |
| [reed] | since the certs are part of NSS in the codebase anyway | 10:01 |
| Ubulette | $ apt-cache rdepends ca-certificates | tr '\n' ' ' | 10:02 |
| Ubulette | ca-certificates Reverse Depends: w3mmee sendmail-base msmtp mew-bin mew-beta-bin esniper dtc-postfix-courier dtc boinc-client balsa w3m openssl mutt libpurple0 libcurl3-gnutls fetchmail | 10:02 |
| asac | [reed]: we don't have permission to add ca-certificates to libnss | 10:02 |
| [reed] | yeah, move it to libnss... that way not every single mozilla project would need to depend on it individually | 10:03 |
| asac | there is a bug about it | 10:03 |
| [reed] | asac: how can I get that fixed? | 10:03 |
| [reed] | who needs to grant permission? | 10:03 |
| asac | and it wouldn't make sense either. afaik libnss doesn't even look at that place (might be wrong though) | 10:03 |
| Ubulette | so ? | 10:04 |
| asac | [reed]: if non of the rdepends is on the CD you need to request addition to the CD seeds | 10:04 |
| [reed] | so, what is using that package then, as installing it fixes a ton of SSL cert problems people are having | 10:04 |
| [reed] | asac: how to do that? | 10:04 |
| [reed] | this is a real problem for us | 10:05 |
| asac | filing a bug is always a good first step. next you need to assign the right team. i guess ubuntu-archive | 10:05 |
| asac | well ... ca-certificates has two sets of certificates afaik: highly trusted + others | 10:06 |
| asac | i guess only the first one is enabled by default | 10:06 |
| [reed] | the mozilla ones need to be included | 10:06 |
| [reed] | otherwise, people go crazy trying to figure out why a site works fine on Mac and Windows with any Mozilla product but not with Ubuntu Linux because of the missing SSL certificates that we include by default | 10:07 |
| asac | [reed]: aren't the right ones installed if you install ca-certificates | 10:07 |
| [reed] | correct | 10:07 |
| [reed] | installing that package fixes the problems | 10:07 |
| asac | then there is not need to include additional certificates in that package | 10:08 |
| asac | just to make that package part of the default install | 10:08 |
| [reed] | yeah | 10:08 |
| [reed] | so, I should file a bug? | 10:08 |
| [reed] | or what? | 10:08 |
| asac | i cannot decide on that though. but i guess its just that some rdepends which was previously on the CD now isn't anymore | 10:08 |
| asac | if thats the case adding to seeds should be fine | 10:08 |
| asac | [reed]: plesae file a bug and give me the bug number | 10:08 |
| [reed] | k | 10:08 |
| asac | i will take over then | 10:08 |
| asac | [reed]: which sites are affected? bugzilla? | 10:11 |
| [reed] | anything using some of the newer certs (such as our crash-reports.mozilla.com), but we get reports about it a lot | 10:12 |
| * [reed] waits on bugzilla to give him query results | 10:13 | |
| asac | well. in fact firefox doesn't suffer from it anyways | 10:14 |
| asac | i think the main point here is that no tls suppor is installed for curl by default | 10:14 |
| Ubulette | ok, removing then | 10:14 |
| [reed] | lp bug 152781 then? | 10:15 |
| ubotu | Launchpad bug 152781 in curl "Curl should depend on ca-certificates" [Undecided,New] https://launchpad.net/bugs/152781 | 10:15 |
| asac | i dropped the depends for now | 10:16 |
| Ubulette | ? | 10:16 |
| [reed] | who handles updating the cert list in ca-certificates? | 10:16 |
| [reed] | since it says "Mozilla certificates" | 10:16 |
| [reed] | we've added a ton of new certs | 10:16 |
| [reed] | between Firefox 2 and Firefox 3 | 10:16 |
| asac | debian | 10:16 |
| Ubulette | lol, i uncommitted it | 10:17 |
| [reed] | need to make sure those get in the package | 10:17 |
| asac | ill try to figure | 10:20 |
| asac | probably not an easy question | 10:20 |
| asac | [reed]: where are those certs? | 10:21 |
| asac | how can i update a .crt ;) | 10:21 |
| Ubulette | iirc, there's a small doc in the sources | 10:24 |
| asac | ok ... i have to figure out procedures first | 10:32 |
| asac | ok i think its just cp certdata.txt into the mozilla/ tree | 10:54 |
| asac | cwong1: pong (sorry) | 11:19 |
| === readyx is now known as ready | ||
| [reed] | woot, flight to Prague has been booked | 14:17 |
| [reed] | :) | 14:17 |
| [reed] | though, I think she got my name wrong on the ticket, so I need to make sure about that | 14:18 |
| [reed] | :/ | 14:18 |
| === asac_ is now known as asac | ||
| asac | [reed]: cool! | 17:16 |
| asac | [reed]: yes, please be sure that the name is right ;) | 17:16 |
| asac | how long is your flight? | 17:16 |
| [reed] | asac: name turned out to be right... seems you all tack on the prefix (Mr., Mrs., etc.) at the end of the first name, which isn't what we do ;) | 18:28 |
| [reed] | asac: 10:20 + 1:40 == 12 hours total of in-flight time :( | 18:29 |
| [reed] | plus time between the two flights at my connection location | 18:30 |
| asac | [reed]: where do you stop? london? | 20:21 |
| [reed] | Amsterdam | 20:21 |
| asac | damn thing ... apparently something broke my mail setup | 21:08 |
| asac | nothing is send out anymore | 21:08 |
| asac | ok, flushed | 21:21 |
| asac | bug 199140 | 23:22 |
| ubotu | Launchpad bug 199140 in network-manager "Network manager shows and connects to virtual interfaces" [High,Confirmed] https://launchpad.net/bugs/199140 | 23:22 |
| === Ubulette_ is now known as Ubulette | ||
| Ubulette | hi | 23:31 |
| asac | hi | 23:36 |
| Ubulette | asac, is cairo in ? | 23:47 |
| asac | we have to wait till CDs are out | 23:55 |
| asac | guess that is about _now_ | 23:55 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!