Debian Bug report logs - #856774
xfce4-equake-plugin: Fails to download data, needs to use https

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jeroen van Aart <android@e-quake.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: xfce4-equake-plugin: Fails to download data, needs to use https

Date: Sat, 04 Mar 2017 06:18:20 -0800

Package: xfce4-equake-plugin
Version: 1.3.8-1
Severity: important
Tags: upstream

The 1.3.8-1 version of xfce4-equake-plugin uses unencrypted http to 
download data from the USGS website. The USGS website has migrated since 
03-01-2017 to only offer https access (see also https://https.cio.gov). 
This means that from that date the equake plugin will not be able to 
download data. I have released upstream version 1.3.8.1 to fix this 
problem, I will submit an updated debian package with this new upstream 
release to mentors.debian.net. Assuming that is the correct way to do this.

-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)

Message #14 received at 856774@bugs.debian.org (full text, mbox, reply):

From: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>

To: Jeroen van Aart <android@e-quake.org>

Cc: 856774@bugs.debian.org

Subject: Re: xfce4-equake-plugin: Fails to download data, needs to use https

Date: Tue, 7 Mar 2017 09:19:08 +0100

Control: tags -1 moreinfo

Hi Jeroen!

In order to be able to evaluate whether it would be possible to get the updated
package into Debian before the Stretch release, we need to have the debdiff
between the current version in Debian unstable and the updated package.

Could you create the debdiff with the debdiff command for the two .dsc files
and attach the generated output to this bug report?

Thanks,
Adrian

-- 
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - glaubitz@debian.org
`. `'   Freie Universitaet Berlin - glaubitz@physik.fu-berlin.de
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913

Message #21 received at 856774@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@debian.org>

To: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>, 856774@bugs.debian.org

Cc: Jeroen van Aart <android@e-quake.org>

Subject: Re: Bug#856774: xfce4-equake-plugin: Fails to download data, needs to use https

Date: Tue, 7 Mar 2017 10:58:43 +0200

On Tue, Mar 07, 2017 at 09:19:08AM +0100, John Paul Adrian Glaubitz wrote:
> Control: tags -1 moreinfo
> 
> Hi Jeroen!
> 
> In order to be able to evaluate whether it would be possible to get the updated
> package into Debian before the Stretch release, we need to have the debdiff
> between the current version in Debian unstable and the updated package.
> 
> Could you create the debdiff with the debdiff command for the two .dsc files
> and attach the generated output to this bug report?
>...

Please submit the debdiff as part of an unblock request to the
release team.[1]

The release team decides which changes are appropriate for stretch,
and this is the proper process for getting an answer from them
(which usually happens quite fast).

cu
Adrian

[1] reportbug release.debian.org

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

Message #26 received at 856774@bugs.debian.org (full text, mbox, reply):

From: Jeroen van Aart <android@e-quake.org>

To: 856774@bugs.debian.org

Subject: Re: Bug#856774: xfce4-equake-plugin: Fails to download data, needs to use https

Date: Tue, 7 Mar 2017 12:43:35 -0800

[Message part 1 (text/plain, inline)]

Hello Adrian,

On 03/07/2017 12:19 AM, John Paul Adrian Glaubitz wrote:
> Control: tags -1 moreinfo
>
> Hi Jeroen!
>
> In order to be able to evaluate whether it would be possible to get the updated
> package into Debian before the Stretch release, we need to have the debdiff
> between the current version in Debian unstable and the updated package.
>
> Could you create the debdiff with the debdiff command for the two .dsc files
> and attach the generated output to this bug report?

Thanks for your response.
Please find attached the debdiff output you asked for.

Greetings,
Jeroen

[debdiff_xfce4-equake_v138-1_v1381-2.diff.gz (application/x-gzip, attachment)]

Message #31 received at 856774@bugs.debian.org (full text, mbox, reply):

From: Jeroen van Aart <android@e-quake.org>

To: 856774@bugs.debian.org

Subject: Re: Bug#856774: xfce4-equake-plugin: Fails to download data, needs to use https

Date: Wed, 8 Mar 2017 15:15:59 -0800

On 03/07/2017 12:43 PM, Jeroen van Aart wrote:
> Hello Adrian,
>
> On 03/07/2017 12:19 AM, John Paul Adrian Glaubitz wrote:
>> Control: tags -1 moreinfo
>>
>> Hi Jeroen!
>>
>> In order to be able to evaluate whether it would be possible to get
>> the updated
>> package into Debian before the Stretch release, we need to have the
>> debdiff
>> between the current version in Debian unstable and the updated package.
>>
>> Could you create the debdiff with the debdiff command for the two .dsc
>> files
>> and attach the generated output to this bug report?
>
> Thanks for your response.
> Please find attached the debdiff output you asked for.

Created https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857118 as well 
per message 21.

Message #36 received at 856774-close@bugs.debian.org (full text, mbox, reply):

From: Jeroen van Aart <android@e-quake.org>

To: 856774-close@bugs.debian.org

Subject: Bug#856774: fixed in xfce4-equake-plugin 1.3.8.1-2

Date: Sun, 19 Mar 2017 03:11:25 +0000

Source: xfce4-equake-plugin
Source-Version: 1.3.8.1-2

We believe that the bug you reported is fixed in the latest version of
xfce4-equake-plugin, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 856774@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jeroen van Aart <android@e-quake.org> (supplier of updated xfce4-equake-plugin package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 18 Mar 2017 18:04:09 -0800
Source: xfce4-equake-plugin
Binary: xfce4-equake-plugin
Architecture: amd64 source
Version: 1.3.8.1-2
Distribution: unstable
Urgency: medium
Maintainer: Jeroen van Aart <android@e-quake.org>
Changed-By: Jeroen van Aart <android@e-quake.org>
Closes: 856774
Description: 
 xfce4-equake-plugin - Xfce panel plugin which monitors earthquakes
Changes:
 xfce4-equake-plugin (1.3.8.1-2) unstable; urgency=medium
 .
   * New upstream release: Closes: 856774
   * Migrated to use https to download earthquake data because USGS will phase
     out or has phased out http access, see also: https://https.cio.gov
     older versions of equake will stop working as a result
   * Make sure libcurl is part of Build-Depends
   * Bump standards version to 3.9.8 (no changes required)
   * Updated Homepage control field to show the https version of the homepage
   * Changed copyright years and added explicit copyright notice for icons
Checksums-Sha1: 
 d06c409ac28fe2a6c5f5c6b5433c637780dc6db3 2180 xfce4-equake-plugin_1.3.8.1-2.dsc
 b432dd9a4833d46da28816b08150af95a928903e 488470 xfce4-equake-plugin_1.3.8.1.orig.tar.gz
 a93a99c96fbd4c28d272c6693e6261aa5b2e0c17 2008 xfce4-equake-plugin_1.3.8.1-2.debian.tar.xz
 4e07118111c98596443ea4e8f7c8e8c196e7e94c 213446 xfce4-equake-plugin-dbgsym_1.3.8.1-2_amd64.deb
 cec0f30373d20d95ae2db5ad1f1ca83560e8a801 11727 xfce4-equake-plugin_1.3.8.1-2_amd64.buildinfo
 79842c6f763ce1b3437d6a7b5755f42f068c8c98 82912 xfce4-equake-plugin_1.3.8.1-2_amd64.deb
Checksums-Sha256: 
 a8d9c90c7f85282a589dc20d35f961113c2ac6ec00d50fc9a82b8308ba942542 2180 xfce4-equake-plugin_1.3.8.1-2.dsc
 32378cfcc741c024fa2dccc50f0b303039968761e81e211bac7e225dc4868295 488470 xfce4-equake-plugin_1.3.8.1.orig.tar.gz
 a9fee6158c3b737aff3eecffadfa8101f1b70c750d18b23279be27f191b15707 2008 xfce4-equake-plugin_1.3.8.1-2.debian.tar.xz
 c62cf75cc13d5aee26d25f7387f19253b7b4ef043c3eb620c4ffef1a55c9948d 213446 xfce4-equake-plugin-dbgsym_1.3.8.1-2_amd64.deb
 34ea953ca5bde6c5cedb455c43ae474f1876728196d6ec586d22b96d656979c9 11727 xfce4-equake-plugin_1.3.8.1-2_amd64.buildinfo
 215bc8575e2c5b1cae91ffac3cc9a98a0bc92eb2e78f0607f11f1234589e9c66 82912 xfce4-equake-plugin_1.3.8.1-2_amd64.deb
Files: 
 4b7af49af392acfdccbae81da136187f 2180 xfce optional xfce4-equake-plugin_1.3.8.1-2.dsc
 41752a6efef043e1d11063c98a5168c1 488470 xfce optional xfce4-equake-plugin_1.3.8.1.orig.tar.gz
 b061e56c37da85409d48fa9b48d7e73c 2008 xfce optional xfce4-equake-plugin_1.3.8.1-2.debian.tar.xz
 5ac897f9cb78f878a759772ed79e0832 213446 debug extra xfce4-equake-plugin-dbgsym_1.3.8.1-2_amd64.deb
 b4e5b8c4d6b33658c63866483c0e7645 11727 xfce optional xfce4-equake-plugin_1.3.8.1-2_amd64.buildinfo
 7bd31b82c7de8581f864701c0d7baeef 82912 xfce optional xfce4-equake-plugin_1.3.8.1-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=DBj8
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.