[00:04] <armin76> haha
[00:05] <armin76> Ubulette: he works for Canonical, what do you expect?! :P
[00:15] <Ubulette> yeah, maybe
[00:35] <asac> Ubulette: hehe ...  no idea. haven't seen that before
[00:37] <asac> looks like a bug
[09:38] <asac> http://www.allpeers.com/blog/2008/03/05/allpeers-lessons-learned/
[09:43] <[reed]> asac: <timely> why isn't https://launchpad.net/ubuntu/gutsy/+package/ca-certificates part of ubuntu 7.10 out of the box?
[09:44] <Ubulette> this is a depends of openssl
[09:44] <[reed]> and openssl isn't installed by default?
[09:45] <Ubulette> and of balsa, mutt, fetchmail, .... maybe we can add it to firefox-3.0 deps
[09:45] <[reed]> please do
[09:45] <[reed]> it's causing problems like mozilla bug 407748 and others
[09:45] <ubotu> Mozilla bug 407748 in Breakpad Integration "Ubuntu 7.10 Crash report submission failed: problem with the SSL CA cert" [Normal,Resolved: invalid] http://bugzilla.mozilla.org/show_bug.cgi?id=407748
[09:48] <Ubulette> done
[09:48] <[reed]> cool, thanks
[09:49] <[reed]> got a link to some commit that I can show to the people who are asking?
[09:50] <Ubulette> https://code.edge.launchpad.net/~mozillateam/firefox/firefox-3.0.head
[09:50] <Ubulette> that will be #194
[09:50] <[reed]> k
[09:50] <[reed]> thx
[09:52] <Ubulette> hm, causing troubles.. maybe having troubles
[09:52] <Ubulette> fixed
[09:59] <asac> [reed], Ubulette: firefox depends is certainly the wrong place to fix this
[10:00] <Ubulette> why ?
[10:00] <Ubulette> same as mutt or balsa
[10:00] <Ubulette> we can also move that to libnss-1d
[10:00] <[reed]> asac: it really should be a part of the default install
[10:01] <[reed]> kinda silly that it isn't
[10:01] <[reed]> making it part of libnss would make sense
[10:01] <[reed]> since the certs are part of NSS in the codebase anyway
[10:02] <Ubulette> $ apt-cache rdepends ca-certificates | tr '\n' ' '
[10:02] <Ubulette> ca-certificates Reverse Depends:   w3mmee   sendmail-base   msmtp   mew-bin   mew-beta-bin   esniper   dtc-postfix-courier   dtc   boinc-client   balsa   w3m   openssl   mutt   libpurple0   libcurl3-gnutls   fetchmail
[10:02] <asac> [reed]: we don't have permission to add ca-certificates to libnss
[10:03] <[reed]> yeah, move it to libnss... that way not every single mozilla project would need to depend on it individually
[10:03] <asac> there is a bug about it
[10:03] <[reed]> asac: how can I get that fixed?
[10:03] <[reed]> who needs to grant permission?
[10:03] <asac> and it wouldn't make sense either. afaik libnss doesn't even look at that place (might be wrong though)
[10:04] <Ubulette> so ?
[10:04] <asac> [reed]: if non of the rdepends is on the CD you need to request addition to the CD seeds
[10:04] <[reed]> so, what is using that package then, as installing it fixes a ton of SSL cert problems people are having
[10:04] <[reed]> asac: how to do that?
[10:05] <[reed]> this is a real problem for us
[10:05] <asac> filing a bug is always a good first step. next you need to assign the right team. i guess ubuntu-archive
[10:06] <asac> well ... ca-certificates has two sets of certificates afaik: highly trusted + others
[10:06] <asac> i guess only the first one is enabled by default
[10:06] <[reed]> the mozilla ones need to be included
[10:07] <[reed]> otherwise, people go crazy trying to figure out why a site works fine on Mac and Windows with any Mozilla product but not with Ubuntu Linux because of the missing SSL certificates that we include by default
[10:07] <asac> [reed]: aren't the right ones installed if you install ca-certificates
[10:07] <[reed]> correct
[10:07] <[reed]> installing that package fixes the problems
[10:08] <asac> then there is not need to include additional certificates in that package
[10:08] <asac> just to make that package part of the default install
[10:08] <[reed]> yeah
[10:08] <[reed]> so, I should file a bug?
[10:08] <[reed]> or what?
[10:08] <asac> i cannot decide on that though. but i guess its just that some rdepends which was previously on the CD now isn't anymore
[10:08] <asac> if thats the case adding to seeds should be fine
[10:08] <asac> [reed]: plesae file a bug and give me the bug number
[10:08] <[reed]> k
[10:08] <asac> i will take over then
[10:11] <asac> [reed]: which sites are affected? bugzilla?
[10:12] <[reed]> anything using some of the newer certs (such as our crash-reports.mozilla.com), but we get reports about it a lot
[10:13]  * [reed] waits on bugzilla to give him query results
[10:14] <asac> well. in fact firefox doesn't suffer from it anyways
[10:14] <asac> i think the main point here is that no tls suppor is installed for curl by default
[10:14] <Ubulette> ok, removing then
[10:15] <[reed]> lp bug 152781 then?
[10:15] <ubotu> Launchpad bug 152781 in curl "Curl should depend on ca-certificates" [Undecided,New] https://launchpad.net/bugs/152781
[10:16] <asac> i dropped the depends for now
[10:16] <Ubulette> ?
[10:16] <[reed]> who handles updating the cert list in ca-certificates?
[10:16] <[reed]> since it says "Mozilla certificates"
[10:16] <[reed]> we've added a ton of new certs
[10:16] <[reed]> between Firefox 2 and Firefox 3
[10:16] <asac> debian
[10:17] <Ubulette> lol, i uncommitted it
[10:17] <[reed]> need to make sure those get in the package
[10:20] <asac> ill try to figure
[10:20] <asac> probably not an easy question
[10:21] <asac> [reed]: where are those certs?
[10:21] <asac> how can i update a .crt ;)
[10:24] <Ubulette> iirc, there's a small doc in the sources
[10:32] <asac> ok ... i have to figure out procedures first
[10:54] <asac> ok i think its just cp certdata.txt into the mozilla/ tree
[11:19] <asac> cwong1: pong (sorry)
=== readyx is now known as ready
[14:17] <[reed]> woot, flight to Prague has been booked
[14:17] <[reed]> :)
[14:18] <[reed]> though, I think she got my name wrong on the ticket, so I need to make sure about that
[14:18] <[reed]> :/
=== asac_ is now known as asac
[17:16] <asac> [reed]: cool!
[17:16] <asac> [reed]: yes, please be sure that the name is right ;)
[17:16] <asac> how long is your flight?
[18:28] <[reed]> asac: name turned out to be right... seems you all tack on the prefix (Mr., Mrs., etc.) at the end of the first name, which isn't what we do ;)
[18:29] <[reed]> asac: 10:20 + 1:40 == 12 hours total of in-flight time :(
[18:30] <[reed]> plus time between the two flights at my connection location
[20:21] <asac> [reed]: where do you stop? london?
[20:21] <[reed]> Amsterdam
[21:08] <asac> damn thing ... apparently something broke my mail setup
[21:08] <asac> nothing is send out anymore
[21:21] <asac> ok, flushed
[23:22] <asac> bug 199140
[23:22] <ubotu> Launchpad bug 199140 in network-manager "Network manager shows and connects to virtual interfaces" [High,Confirmed] https://launchpad.net/bugs/199140
=== Ubulette_ is now known as Ubulette
[23:31] <Ubulette> hi
[23:36] <asac> hi
[23:47] <Ubulette> asac, is cairo in ?
[23:55] <asac> we have to wait till CDs are out
[23:55] <asac> guess that is about _now_