/srv/irclogs.ubuntu.com/2008/05/17/#launchpad.txt

elhokiko: just hope someone actually still is responsible for it ;)00:07
alecwhMy SSH key was recently rejected by LP (because of the infamous SSH bug found), so I updated my system, created another one, put it inside LP, and it is rejecting it. "This key is known to be compromised due to a security flaw in the software used to generate it"01:17
alecwhI'm fairly certain I just upgraded my system.01:17
intellectronicaalecwh: can you check your key with ssh-vulnkey?01:36
alecwhintellectronica: I don't have that package installed, how do I get it?01:37
intellectronicaif you don't have it installed then you haven't upgraded to the latest version. it's in the same package01:38
intellectronicaalecwh: are you using ubuntu?01:39
alecwhintellectronica: Yes, hold on, I'm doing an apt-get update01:40
intellectronicaalecwh: after that you also need to do `apt-get upgrade`01:40
intellectronicaand then generate new keys01:41
alecwhokay, I'll check back when my bandwidth lifts up, my internet is going really slow.01:41
intellectronicacool01:41
kikoalecwh, apt-get dist-upgrade01:50
alecwhkiko: I'm using the latest Ubuntu version already.01:54
kikoalecwh, if you don't have ssh-vulnkey, you aren't :)01:56
kikoalecwh, if you just did upgrade you won't have it. you need dist-upgrade.01:56
alecwhkiko: I'm 100% I'm using 8.04. =) I'm waiting for a friend down the hall from downloading a video, and then I'm going to update my repositories01:57
* Hobbsee wonders01:58
kikoalecwh, it's not 8.04 that's the issue -- it's dist-upgrade.01:58
Hobbseeoh, it is in openssh-client01:58
alecwhhmm, okay, I'll try it in like 5 minutes - sorry...01:58
kikonoprobs01:58
kikoI'm outta here but intellectronica or Hobbsee can help01:58
kikosee you all from prague!01:58
Hobbseealecwh: do you have openssh-client installed?01:59
emgentshitty weather in Prague :(02:01
Hobbseeclear sky, 10C?  yeah.  bit cold.02:01
emgentHobbsee: rain :(02:02
emgenthttp://www.bbc.co.uk/weather/5day.shtml?world=0055&links02:02
alecwhHobbsee: yes02:03
Hobbseealecwh: run `which ssh-vulnkey` and paste the output please.02:03
Hobbseeemgent: very dodgy.02:03
Hobbseeemgent: spain was lovely.  there should be a requirement on all european weather being nice for uds'02:04
emgentture italy too :)02:04
emgents/ture/true/02:04
alecwhalecwh@alecwh-laptop:~$ which ssh-vulnkey02:04
alecwhalecwh@alecwh-laptop:~$ 02:04
* Hobbsee kicks the weather applet02:04
Hobbseealecwh: and `ls -la /usr/bin/ssh-vulnkey`?02:05
* Hobbsee scratches head.02:05
alecwhHobbsee: eh, I just did an update, and I have security packages to download...02:05
Hobbseealecwh: that'll do it....02:05
Hobbseealecwh: it's in them.02:05
alecwh=)02:05
alecwhSorry about that.02:05
Rinchennickellery, are you here?02:06
emgentHobbsee: good possibility for news uds in italy :)02:07
Hobbseeemgent: now that would be fun....02:08
Rinchennickellery, one of your likely problems is that you seem to have 4 keys :-)02:12
emgentHobbsee: :)02:12
emgentI think so :)02:13
Rinchennickellery, well, since you're not around I've sent you a signed email to decode02:27
Rinchennickellery, you can also take the gpg text from Launchpad, save it into a text file, and run gpg from the command line on it02:27
Rinchenhi Hobbsee.  bye Hobbsee.02:27
HobbseeRinchen: ?02:27
Rinchendrive by "hello" :-)02:28
HobbseeRinchen: oh...hi then....02:28
* Rinchen is off to a very late dinner02:28
Hobbseeoh.  enjoy.02:28
emgenti go to sleep people02:36
emgentsee you from Prague!02:36
=== lamont` is now known as lamont
brandon_could someone explain why im getting another email from Matt Revell about my SSH key after I did the update and generated a new key which tested ok by ssh-vulnkey03:42
nickelleryRinchen, sorry about that, but I'm available now04:05
PengHow often is Launchpad's bzr installation updated?08:17
PengIt's currently 1.3..08:17
thumperPeng: every release, we update to the latest released bzr version08:57
thumperPeng: when Launchpad was last updated, it was still 1.4 rc 108:58
thumperPeng: so it had to wait08:58
thumperPeng: so when the next Launchpad rollout happens in a week and a half you will see bzr #1.508:58
PengOk.08:58
PengThanks, thumper.08:59
thumperPeng: np08:59
PengI think bzr has gotten more efficient when pulling when there are no changes since 1.3.09:00
Peng(Which Launchpad does all the time.)09:00
thumperPeng: it has09:00
PengIt'll start auto-detecting bzr+http, too, won't it?09:00
thumperperhaps09:03
thumperI'm not sure what we need to do on the Launchpad end to get that working09:03
thumperbut I'll chase up spiv09:03
* Peng shrugs.09:04
PengIf Launchpad just does os.system('bzr pull ...'), nothing needs to be changed. If you use bzrlib's API, I have no idea.09:04
emgentheya11:50
=== mpt_ is now known as mpt
=== _neversfelde is now known as neversfelde
theseinfeldquestion about PPA13:28
theseinfeldI deleted all the packages in the PPA13:29
theseinfeldstill13:29
theseinfeldwhen I do a dput I get: MD5 sum of uploaded file does not match existing file in archive13:29
theseinfeldhow do you get rid of this one?13:29
* theseinfeld is totally puzzled...13:29
PengAFAIK, deletes aren't processed instantly.13:29
PengIt may work after "a while".13:29
theseinfeldhmm...13:30
theseinfeldhow about couple of hours?13:30
theseinfeldlike 2 hours...13:30
PengI dunno.13:30
Hobbseesee the help on the left hand side of the page13:30
theseinfeldMy guess is that the source package is still not deleted13:30
Hobbseedecipher it if possible13:30
Hobbseeit can be up to 12 hours13:30
theseinfeld:D13:30
Hobbseebetter to increment version13:30
theseinfeldof the source package?13:30
theseinfeldmy guess is that the source package is the problem13:31
theseinfeldearlier, the orig.tar.gz was from the svn13:31
theseinfeldnow it is from the release13:31
theseinfelddo you think this might be the case?13:31
Hobbseeprobably13:31
theseinfeldso, is there a way to delete the source package?13:31
Hobbseeeventually.13:32
theseinfeldafter ~12 hours?13:32
theseinfeld:D13:32
Hobbseeyou may have to publish something else, too13:32
Hobbseewhich may make it faster.13:32
Hobbseeyeah, exactly...13:32
theseinfeldI see13:32
theseinfeldI will look into it13:32
theseinfeldI already filed a bug report13:32
theseinfeldI was thinking it was related to BUG  19189213:33
ubottuLaunchpad bug 191892 in soyuz "Unsuperseded binaries can't be deleted from PPAs" [High,Fix released] https://launchpad.net/bugs/19189213:33
theseinfeldI was on that one before it happen :)13:33
=== fdd-0 is now known as fdd
jelmerHi!15:07
jelmerIs there some way to access bug status information in launchpad over XML-RPC?15:08
=== thekorn is now known as thekorn_96
BjornTjelmer: no. but you can get a text representation of the bug by appending /+text to the url15:29
jelmerBjornT: Ah, thanks. Even better :-)15:30
=== thekorn_96 is now known as thekorn
jelmerBjornT: Is there a description of the format somewhere?15:32
BjornTjelmer: no. it's a bit undocumented, since it's basically just a placeholder, until we get proper apis in place.15:35
BjornTjelmer: it consists of multiple parts, separated by a blank line.15:35
BjornTjelmer: first there is information about the bug itself. after that, there is one or more 'task' section, which gives information about the bug in each context it is reported15:36
BjornTjelmer: after the 'task' sections is a multipart/mime message, which contains the bug description, and all the comments15:37
jelmerBjornT: Thanks, that helps!15:37
BjornTeach section should be parsable with the python email module15:37
jelmerBjornT: Ah, that sounds much simpler :-)15:44
thekornjelmer, btw, python-launchpad-bugs has a parser for this +text pages15:45
jelmerthekorn: thanks, I'll see if I can get some inspiration from that one15:46
jelmerThis is in Debian though, so I can't use that module directly15:46
thekornjelmer, the first part is not always parseable with the email modul, you can use the configParser for this part15:47
jelmerLooks like rfc822 does sufficient for what I'm looking for15:55
=== fta2 is now known as fta
jelmerok, bts-link now supports launchpad17:22
=== gnomefre2k is now known as gnomefreak
Yhouse[OFF]hello19:34
LantashAfter having deleted my old SSH key and generated a new one, I keep getting the same error message as before:19:45
LantashPermission denied (publickey).19:45
Lantashbzr: ERROR: Connection closed: please check connectivity and permissions (and try -Dhpss if further diagnosis is required)19:45
LantashDoes anyone know how to solve this issue?19:45
beunoLantash, have you uploaded you new key to Launchpad?19:48
Lantashyeah, using https://launchpad.net/~lantash/+editsshkeys19:48
Lantashthe weird thing is that the "Key text" seems to be the same when I regenerate the key...19:49
beunoLantash, then something must be wrong19:50
Lantashat least always began with "AAAB3N"19:50
beunoare you using ssh-keygen?19:50
LantashI am... just as described in http://www.ubuntu.com/usn/usn-612-219:51
LantashI tried it several times... the fingerprints weren't the same19:52
Lantashdon't get it...19:59
Lantashremoving the whole ~/.ssh dir didn't solve the problem either -> different private key, but the public key is always the same20:02
Lantashehrm just noticed that the public key isn't always the same, only the first 26 characters ^^, but I still get this Permission denied (publickey) error message20:26
mtaylorbeuno: do we have to reupload keys even if our key was made pre-openssl bug? 20:26
beunomtaylor, no, not at all. Launchpad will remove your key if it's weak, so if it hasn't your safe20:27
mtaylorbeuno: hrm.20:27
mtaylorbeuno: none of my keys are listed by ssh-vulnkey... but bazaar.launchpad.net is still rejecting me atm20:28
beunomtaylor, did you get an email about the key's removal?20:36
mtaylorbeuno: no. and it looks like it's not removed20:37
mtaylorbeuno: but I'm getting bzr: ERROR: Connection closed: please check connectivity and permissions (and try -Dhpss if further diagnosis is required)20:37
mtaylorwhen I try to do anything today20:37
beunohrm20:37
beunoyou seem to be having the same probleam as Lantash...20:37
Lantashright :-/20:37
beunoI don't think we have any LP admins around right now...  Rinchen might be able to point us towards someone20:39
beunoah20:39
beunomine isn't working either  :)20:40
beunoelmo? thumper? lifeless? SteveA?20:40
beunoall ssh keys seem to get rejected20:40
mtaylorgreaaaat20:41
beunoabentley?20:41
beunothis probably is the worst time, as most people will probably be travelling to UDS20:41
abentleybeuno: Hi.20:42
beunoabentley, hey  :)    we seem to be having a problem20:42
abentleyWith ssh to bazaar.launchpad.net?20:42
beunoabentley, yeap20:43
mtayloryup20:43
PengYep.20:43
abentleyHave you updated your key since the openssl vulnerability was announced?20:43
mtaylormine isn't vulnerable20:43
Lantashabentley: I have20:43
PengI have one older, good key and one new key. Both fail.20:43
beunoabentley, mine is pre-2006 too, and it pases all the tests20:43
abentleyI can log in to sftp.20:44
abentleyOr maybe I can't.  Silly lftp.20:44
beunobeuno@beuno-laptop:~$ sftp beuno@bazaar.launchpad.net20:44
beunoConnecting to bazaar.launchpad.net...20:44
beunoPermission denied (publickey).20:44
mtaylorsame here20:44
PengMe too.20:46
* Peng feels redundant.20:46
aos101launchpadlibrarian.net is down for me.  Is it down for others?20:46
abentleyOkay, I can confirm.20:46
Pengaos101: Seems to be.20:47
beunosince Lantash reported it first, I'd say *he* broke it  :)20:47
PengWho ran "rm -rf /"?20:47
Lantashhehe :-D20:47
aos101Peng: Thanks.  It was down when I tried it earlier also.20:48
mtaylorPeng: oh. was I not supposed to run rm -rm / ? darn it20:49
lagawhat does that command do? let me try20:49
beunoah, seems many images are stored in launchpadlibrarian20:51
beunoso it makes navigating LP akward20:51
abentleyI've sent out an email to our launchpad sysadmins.  I've also tried to ping them on the private IRC server.20:59
beunoabentley, great, thanks. So we play the waiting game now21:00
abentleyFrom the symptoms, it sounds like a problem with the internal xml-rpc server.21:01
beunoit has to have borken down in the past hour or so21:02
beunos/borken/broken21:02
beunoI used it before that21:02
abentleybeuno: the practise with vulnerable keys was to remove them from the user profile, and then forbid re-uploading them.  Any key still in your profile will (normally) work.21:02
abentleyI just thought it could have been removed, and you might not have noticed the email.21:03
beunoabentley, ah, right. No, I've been using it, and tested my key21:03
beunoabentley, LP is still running bzr 1.3?  That's odd, it used to be very much in sync21:11
abentley1.4 came out too late for it to be included in our monthly release.21:11
beunoah, so it's straight to 1.5?21:12
nickelleryis it possible for me to change my launchpad username?21:15
Pengnickellery: Yes.21:15
nickelleryPeng: how do i do that?21:15
Pengnickellery: I dunno. But you can.21:15
nickelleryPeng: should i contact an admin?21:15
Pengnickellery: User page -> Change details.21:16
nickelleryPeng: omg i never even noticed that I could do that!21:16
nickellerythanks21:17
abentleybeuno: That's the plan.21:20
asabilhi all21:27
asabilI am having troubles pushing code to launchpad21:27
Pengasabil: Yeah.21:27
mtaylorasabil: yup. something's broke21:27
asabilso I am not the only one21:27
PengYou are not.21:28
Penglaunchpadlibrarian.net is down too. :)21:28
gmbasabil, Peng, mtaylor I'm trying to get hold of someone who can look into this now.21:29
asabilok thanks a lot21:29
blueyedlaunchpadlibrarian.net is down?21:33
beunoblueyed, yes, and ssh access to bazaar.launchpad21:34
Peng"Oops"21:43
gmbconnecting to baazr.lp.net seems to work for me now.21:43
gmbA21:43
elmolibrarian is on it's way back21:43
gmbelmo: Cool, thanks.21:44
Pengbzr+ssh and sftp still don't work for me.21:44
elmoPeng: what's your LP userid?21:45
elmolibrarian is back up21:46
Pengelmo: mnordhoff.21:47
elmoPeng: you're not using one of the compromised keys we deleted, right?21:48
PengLibrarian works though.21:48
Pengelmo: I got one of my keys deleted, but the rest are okay.21:48
PengI just tried two keys too.21:49
elmoPeng: can you retry bzr+ssh and sftp now?  maybe the codehosting is using the librarian to fetch keys21:49
Peng(bzr.dev, if it matters.)21:49
elmoand when I said it was on it's way back, it was still booting21:49
Pengelmo: Still doesn't work.21:49
beunoelmo, I can't connect either21:49
elmobother21:49
elmoI can't see anything obviously wrong on vostok21:49
Peng91.189.94.254?21:50
elmoyah21:50
PengStill doesn't work.21:51
elmolala21:51
elmolet me see if mister quiche is in the house21:51
PengAny chance I got blocked because I tried like 10 times while it was still down?21:52
PengMy other IP probably didn't though.21:53
elmoPeng: don't think so - I don't think  we have that kind of heuristics21:53
PengDoesn't work from a third IP where I've never tried it before.21:54
Peng(All around the U.S.)21:54
elmoOH21:54
PengVostok's host key fingerprint is 9d:38:3a:63:b1:d5:6f:c4:44:67:53:49:2e:ee:fc:89, right? :)21:54
PengOh?21:54
elmoI know what it is, give me two secs21:54
elmoPeng: try now21:55
Pengelmo: Works. What was wrong?21:55
PengThanks. :)21:55
beunoworks here too21:55
elmoPeng: the authentication server for the code hosting died in the same crash the took out the librarian21:57
elmoit didn't immediately click for a variety of reasons, starting with it should have auto-started but mostly boiling down to me being stupid21:58
PengHuh.21:58
PengOkay.21:58
Lantas1works like a charm... thanks a lot for fixing this issue21:58

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!