Debian Bug report logs - #615883
requires no longer created MD5Sum checksums in Release file

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Stefan Lippers-Hollmann" <s.L-H@gmx.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: requires no longer created MD5Sum checksums in Release file

Date: Mon, 21 Feb 2011 00:14:38 +0100

Package: cdebootstrap
Version: 0.5.7
Severity: important

Hi

Since today[1], ftp-master doesn't generate md5 checksums for Release/ 
InRelease anymore, thereby breaking cdebootstrap which appears to break
cdebootstrap for all suites which got rebuilt since the change (wheezy/ sid,
squeeze hasn't been regenerated yet).

# cdebootstrap --arch=amd64 --flavour=minimal --debug --verbose sid /mnt/ http://ftp.de.debian.org/debian
D: Init suite sid
D: Using keyring /usr/share/keyrings/debian-archive-keyring.gpg
P: Retrieving Release
D: Execute "wget -q -O /mnt/var/cache/bootstrap/_dists_._Release http://ftp.de.debian.org/debian/dists/sid/Release"
D: Status: 0
P: Retrieving Release.gpg
D: Execute "wget -q -O /mnt/var/cache/bootstrap/_dists_._Release.gpg http://ftp.de.debian.org/debian/dists/sid/Release.gpg"
D: Status: 0
P: Validating Release
D: Execute "gpgv --logger-fd 1 --status-fd 1 --keyring /usr/share/keyrings/debian-archive-keyring.gpg /mnt/var/cache/bootstrap/_dists_._Release.gpg /mnt/var/cache/bootstrap/_dists_._Release"
I: Good signature from "Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>"
D: Status: 0
P: Parsing Release
P: Retrieving Packages.gz
D: Execute "wget -q -O /mnt/var/cache/bootstrap/_dists_._main_binary-amd64_Packages.gz http://ftp.de.debian.org/debian/dists/sid/main/binary-amd64/Packages.gz"
D: Status: 0
E: Can't find checksum for Packages file

Adding --allow-unauthenticated or using different target architectures 
has no effect, while switching to as-of-yet-unsynched mirrors (like 
ftp.at.debian.org) succeeds.

Regards
	Stefan Lippers-Hollmann

[1]	http://lists.debian.org/debian-devel-announce/2011/02/msg00008.html

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.37-1.slh.1-aptosid-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cdebootstrap depends on:
ii  debian-archive-keyring        2010.08.28 GnuPG archive keys of the Debian a
ii  gpgv                          1.4.11-3   GNU privacy guard - signature veri
ii  libc6                         2.11.2-11  Embedded GNU C Library: Shared lib
ii  libdebian-installer-extra4    0.77       Library of some extra debian-insta
ii  libdebian-installer4          0.77       Library of common debian-installer
ii  wget                          1.12-2.1   retrieves files from the web

cdebootstrap recommends no packages.

cdebootstrap suggests no packages.

-- no debconf information

Message #10 received at 614314@bugs.debian.org (full text, mbox, reply):

From: Steven Shiau <steven@nchc.org.tw>

To: 614314@bugs.debian.org

Subject: Confirmed- Same issue here

Date: Tue, 22 Feb 2011 08:42:21 +0800

I can confirmed that I have the exactly same issue here.
I need cdebootstrap or debootstrap to create Sid live.

Steven.

-- 
Steven Shiau<steven _at_ nchc org tw>  <steven _at_ stevenshiau org>
National Center for High-performance Computing, Taiwan.
http://www.nchc.org.tw
Public Key Server PGP Key ID: 1024D/9762755A
Fingerprint: A2A1 08B7 C22C 3D06 34DB  F4BC 08B3 E3D7 9762 755A

Message #23 received at 615883-done@bugs.debian.org (full text, mbox, reply):

From: Steven Chamberlain <steven@pyro.eu.org>

To: 615883-done@bugs.debian.org

Subject: Re: Bug#615883: requires no longer created MD5Sum checksums in Release file

Date: Mon, 6 Mar 2017 17:34:47 +0000

[Message part 1 (text/plain, inline)]

Source-Version: 1.58

Hi,

This bug was fixed by the following change in the latest upload to sid:

  * Use SHA256 for verification.  (closes: #856211)

Regards,
-- 
Steven Chamberlain
steven@pyro.eu.org

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.