Debian Bug report logs -
#858998
rpmsign silently accepts every password
Reported by: Arturo Borrero Gonzalez <arturo@debian.org>
Date: Wed, 29 Mar 2017 12:27:01 UTC
Severity: normal
Found in version rpm/4.12.0.2+dfsg1-1
Fixed in version rpm/4.12.0.2+dfsg1-2
Done: Michal Čihař <nijel@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, arturo@debian.org, RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>:
Bug#858998; Package rpm.
(Wed, 29 Mar 2017 12:27:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Arturo Borrero Gonzalez <arturo@debian.org>:
New Bug report received and forwarded. Copy sent to arturo@debian.org, RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>.
(Wed, 29 Mar 2017 12:27:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
Package: rpm
Version: 4.12.0.2+dfsg1-1
Severity: important
Dear Maintainer,
thanks for your work with the rpm package, it's really appreciated.
When running rpmsign to add a signature to a rpm package, it seems to
accept every password without complaint:
% rpmsign --addsign myrpm.rpm
Enter pass phrase:
[ wrong password ]
% echo $?
0
I don't know if this means that rpmsign is not able to read my config
and therefore doesn't do anything.
But still, the result is the same using either a good or a wrong password,
which is a bit surprising.
I've tested with these 2 macro files in ~/.rpmmacros:
===== option1 =====
%_signature gpg
%_gpg_name myemail@example.com
%_gpg_path ~/.gnupg
%__gpg_sign_cmd %{__gpg} \
gpg --force-v3-sigs --digest-algo=sha1 --batch --no-verbose --no-armor \
--passphrase-fd 3 --no-secmem-warning -u "%{_gpg_name}" \
-sbo %{__signature_filename} %{__plaintext_filename}
===================
===== option2 =====
%_gpg_name myemail@example.com
===================
-- System Information:
Debian Release: 9.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=es_ES.utf8, LC_CTYPE=es_ES.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages rpm depends on:
ii debugedit 4.12.0.2+dfsg1-1
ii libc6 2.24-9
ii libelf1 0.168-0.2
ii libpopt0 1.16-10+b2
ii librpm3 4.12.0.2+dfsg1-1
ii librpmbuild3 4.12.0.2+dfsg1-1
ii librpmio3 4.12.0.2+dfsg1-1
ii librpmsign3 4.12.0.2+dfsg1-1
ii perl 5.24.1-2
ii rpm-common 4.12.0.2+dfsg1-1
ii rpm2cpio 4.12.0.2+dfsg1-1
rpm recommends no packages.
Versions of packages rpm suggests:
pn alien <none>
pn elfutils <none>
pn rpm-i18n <none>
pn rpm2html <none>
ii rpmlint 1.9-6
-- no debconf information
Severity set to 'normal' from 'important'
Request was from Michal Čihař <nijel@debian.org>
to control@bugs.debian.org.
(Wed, 29 Mar 2017 12:57:09 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>:
Bug#858998; Package rpm.
(Wed, 29 Mar 2017 13:15:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Michal Čihař <michal@cihar.com>:
Extra info received and forwarded to list. Copy sent to RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>.
(Wed, 29 Mar 2017 13:15:04 GMT) (full text, mbox, link).
Message #12 received at 858998@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Hi
Arturo Borrero Gonzalez píše v St 29. 03. 2017 v 14:23 +0200:
> Package: rpm
> Version: 4.12.0.2+dfsg1-1
> Severity: important
>
> Dear Maintainer,
>
> thanks for your work with the rpm package, it's really appreciated.
>
> When running rpmsign to add a signature to a rpm package, it seems to
> accept every password without complaint:
>
> % rpmsign --addsign myrpm.rpm
> Enter pass phrase:
> [ wrong password ]
>
> % echo $?
> 0
>
> I don't know if this means that rpmsign is not able to read my config
> and therefore doesn't do anything.
>
> But still, the result is the same using either a good or a wrong
> password,
> which is a bit surprising.
The whole thing is caused by newer gpg which does use gpg-agent
preferably and probably doesn't read the passphrase from rpm at all (at
least in default configuration).
I've done some quick tests the passphrase passed from RPM is not used
at all, gpg always asks gpg-agent and it most likely had the passphrase
cached in your case, so the signing did succeed.
In case you give wrong passphrase to the agent, it fails as expected:
$ rpmsign --addsign libgsmsd8-1.38.1-4.1.i586.rpm
Enter pass phrase:
gpg: signing failed: Bad passphrase
gpg: signing failed: Bad passphrase
Pass phrase check failed or gpg key expired
$ echo $?
1
In rpm 4.13 the passphrase is not asked at all:
https://github.com/rpm-software-management/rpm/commit/0bce5fcf270711a2e
077fba0fb7c5979ea007eb5
I can try backporting this patch (excluding API change), but as the
issue is not really severe I'm not sure it's good enough for freeze
exception...
--
Michal Čihař | https://cihar.com/ | https://weblate.org/
[signature.asc (application/pgp-signature, inline)]
Added tag(s) pending.
Request was from Michal Čihař <nijel@debian.org>
to control@bugs.debian.org.
(Wed, 29 Mar 2017 13:39:05 GMT) (full text, mbox, link).
Message sent on
to Arturo Borrero Gonzalez <arturo@debian.org>:
Bug#858998.
(Wed, 29 Mar 2017 13:39:07 GMT) (full text, mbox, link).
Message #17 received at 858998-submitter@bugs.debian.org (full text, mbox, reply):
tag 858998 pending
thanks
Hello,
Bug #858998 reported by you has been fixed in the Git repository. You can
see the changelog below, and you can check the diff of the fix at:
https://anonscm.debian.org/cgit/pkg-rpm/rpm.git/commit/?id=a43a2f4
---
commit a43a2f4594638732c7247ad3cf04eda71c57baa0
Author: Michal Čihař <nijel@debian.org>
Date: Wed Mar 29 15:10:34 2017 +0200
Add patch to improve rpmsign behavior with gpgp2 (Closes: #858998).
diff --git a/debian/changelog b/debian/changelog
index 0a37582..350d5b8 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,9 @@
-rpm (4.12.0.2+dfsg1-2) UNRELEASED; urgency=medium
+rpm (4.12.0.2+dfsg1-2) unstable; urgency=medium
* Adjust debian/watch to new upstream website.
+ * Add patch to improve rpmsign behavior with gpgp2 (Closes: #858998).
- -- Michal Čihař <nijel@debian.org> Thu, 17 Nov 2016 11:40:59 +0100
+ -- Michal Čihař <nijel@debian.org> Wed, 29 Mar 2017 15:24:58 +0200
rpm (4.12.0.2+dfsg1-1) unstable; urgency=medium
Reply sent
to Michal Čihař <nijel@debian.org>:
You have taken responsibility.
(Wed, 29 Mar 2017 13:51:17 GMT) (full text, mbox, link).
Notification sent
to Arturo Borrero Gonzalez <arturo@debian.org>:
Bug acknowledged by developer.
(Wed, 29 Mar 2017 13:51:17 GMT) (full text, mbox, link).
Message #22 received at 858998-close@bugs.debian.org (full text, mbox, reply):
Source: rpm
Source-Version: 4.12.0.2+dfsg1-2
We believe that the bug you reported is fixed in the latest version of
rpm, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 858998@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michal Čihař <nijel@debian.org> (supplier of updated rpm package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 29 Mar 2017 15:24:58 +0200
Source: rpm
Binary: rpm rpm2cpio rpm-common rpm-i18n librpm3 librpmio3 librpmbuild3 librpmsign3 librpm-dev python-rpm python3-rpm debugedit
Architecture: source amd64 all
Version: 4.12.0.2+dfsg1-2
Distribution: unstable
Urgency: medium
Maintainer: RPM packaging team <pkg-rpm-devel@lists.alioth.debian.org>
Changed-By: Michal Čihař <nijel@debian.org>
Description:
debugedit - tool to mangle source locations in .debug files
librpm-dev - RPM shared library, development kit
librpm3 - RPM shared library
librpmbuild3 - RPM build shared library
librpmio3 - RPM IO shared library
librpmsign3 - RPM signing shared library
python-rpm - Python bindings for RPM
python3-rpm - Python 3 bindings for RPM
rpm - package manager for RPM
rpm-common - common files for RPM
rpm-i18n - localization and localized man pages for rpm
rpm2cpio - tool to convert RPM package to CPIO archive
Closes: 858998
Changes:
rpm (4.12.0.2+dfsg1-2) unstable; urgency=medium
.
* Adjust debian/watch to new upstream website.
* Add patch to improve rpmsign behavior with gpgp2 (Closes: #858998).
Checksums-Sha1:
780ca2fdc1e9027c36fabb07366e7cca340220d1 3041 rpm_4.12.0.2+dfsg1-2.dsc
adddaf7775a6405a4e923274c0364e3e6d971547 36240 rpm_4.12.0.2+dfsg1-2.debian.tar.xz
f182c30eb6d2088389d212b46ae45353da0da13b 38692 debugedit-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
5ed16873f40031e270047d18307ecad51d294852 1113870 debugedit_4.12.0.2+dfsg1-2_amd64.deb
4c491f127d3f705e90c9c7fac512b89488184bd0 1155714 librpm-dev_4.12.0.2+dfsg1-2_amd64.deb
8ca827668da78e7d3266304ede960f1a097d52b9 519870 librpm3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
8c487286a3f0f7af3e45f58e084c9104c1923869 1255380 librpm3_4.12.0.2+dfsg1-2_amd64.deb
567034fc768e1b587d3c24f9bcb8d3db1f69f0f7 171018 librpmbuild3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
dae35d859972b6b02fa72c734074c2b6bd9206cd 1156730 librpmbuild3_4.12.0.2+dfsg1-2_amd64.deb
1bdd89db6af024b0c6f479fb728f23a28d8cf788 201720 librpmio3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
1ab7310a44b274b23d3bb061b4d5f6c51e7f384f 1166358 librpmio3_4.12.0.2+dfsg1-2_amd64.deb
3754ebdb0991fe35037b71e8506ac8c79b285cc0 18354 librpmsign3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
41d2e2457f807a08dad799b2bd08d8c8e66852df 1106216 librpmsign3_4.12.0.2+dfsg1-2_amd64.deb
436204e2dc2d72976e6ac2ec847e554f4df54707 147298 python-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
5aed40e8fd746e6f215fe5d6f17fa340fb4de7a3 1135754 python-rpm_4.12.0.2+dfsg1-2_amd64.deb
38c0683a6f231416be61fd7310723b4f23edcca3 146434 python3-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
e869d2b8b1809609f5d32ea6cda77978d053d72f 1135988 python3-rpm_4.12.0.2+dfsg1-2_amd64.deb
18a663b336e620bf4e90e64c432011a23745e24b 26708 rpm-common-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
9779bc189f22f1d4adfcf180292dcc30e32b7c6b 1123738 rpm-common_4.12.0.2+dfsg1-2_amd64.deb
a658f63f90b6656a23cebb79985d0fb5365242f5 113570 rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
5b30c2019ae98358eb270b13a46783529e49ff80 1413206 rpm-i18n_4.12.0.2+dfsg1-2_all.deb
5d4e6f260d304966a443fe48bf5e75621610ef89 21232 rpm2cpio-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
2a093a6ea72545960d1e36136dea40ca401ec27d 1105868 rpm2cpio_4.12.0.2+dfsg1-2_amd64.deb
afbff6c7e74a3e2a549d4c55cf7047f71c9d346d 14080 rpm_4.12.0.2+dfsg1-2_amd64.buildinfo
8daa909d0a1ceeaf1045042060df9662cd9ee9b4 1213434 rpm_4.12.0.2+dfsg1-2_amd64.deb
Checksums-Sha256:
a2dae9dda3bd92a2e742860c53ea664e75e3f8e4ee4d406b9070cfbda6c10af0 3041 rpm_4.12.0.2+dfsg1-2.dsc
95aa2e40609bf42f4054d4b0ea372adca672429e37c14465ea45bff414ea8847 36240 rpm_4.12.0.2+dfsg1-2.debian.tar.xz
8fee63f82a03a04ffb0b68ce4cc70013200ffae8cec14146d0ed2e75b6aa8139 38692 debugedit-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
12d6c2bbf834bfd2a90dfdcf329613c4b09b2f766dc812385f9449d34bf6dbf9 1113870 debugedit_4.12.0.2+dfsg1-2_amd64.deb
25637a834ebdfec4d8f8dda08dbd93abdf6b2198a8948fbbf22924c4458b5481 1155714 librpm-dev_4.12.0.2+dfsg1-2_amd64.deb
edb5c6c5b4e6a0d2a00dda6c2370d375599e19da5abcdf188f321019166ce2af 519870 librpm3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
7ccdce0213f8cbccb593693af572dec38fcd31f8aea13b69fbfc9af0b98ea514 1255380 librpm3_4.12.0.2+dfsg1-2_amd64.deb
48e214c8e19fab247b10e3c246b6b24d77172c4a460b5df73356d4920de00219 171018 librpmbuild3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
4789e9b5113fc23fbe5f6686026d94d62f552f2eb8e054bc00fa42acc3959447 1156730 librpmbuild3_4.12.0.2+dfsg1-2_amd64.deb
897c5c285d13fbe1a2873cc2a1b6fdd0d9779bb3eac02798db8934e9a70f887f 201720 librpmio3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
715515939d3ebe42bd37477439a96f4e8358533c7b2dcf009230425f57334ddb 1166358 librpmio3_4.12.0.2+dfsg1-2_amd64.deb
c3b583c0e9d35b0558fdac0525c06f095695ac49d9ef87a5452b445da64e6e55 18354 librpmsign3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
5caae147914a9214bfb891401d6bef638d824e240705ba0aed5d6b524237e285 1106216 librpmsign3_4.12.0.2+dfsg1-2_amd64.deb
38230b185e955f83a2f685b9532963fdda4ef6c4452f005f11c9bda2d925e651 147298 python-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
9e28211ff80a330643e05bf4fd067b01c86e8e802c3ec6e04d9bc1b5e92de376 1135754 python-rpm_4.12.0.2+dfsg1-2_amd64.deb
da817858ffaf33cf9e45514616ab6e6cffd627107ae8beaefc43afcb20626c5a 146434 python3-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
7a50a0dffd4e9c397ebf9aae4227fe016e775f06182c7e57220e6938fccf64c4 1135988 python3-rpm_4.12.0.2+dfsg1-2_amd64.deb
e1429dc9da03b44c8c409f8cb88280853379da643c293e637618fd648ce95d79 26708 rpm-common-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
5e49501c1f019a2e57690f0e17e29636ca6ca49b3cb5841382c97acd57ab31c2 1123738 rpm-common_4.12.0.2+dfsg1-2_amd64.deb
b622bbfce46956ec284624a4f8519866e2002e9425a8e3fa53963721b29198eb 113570 rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
29f429f36a6b1699b0522ec6030c6cda0294c8eb07b8ed3ffc8d838723d5283f 1413206 rpm-i18n_4.12.0.2+dfsg1-2_all.deb
f35913d7ced2218e759abe7fed9be1207b05f27a5617bd3f1aaf5c16dd0c2337 21232 rpm2cpio-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
d6bd482c355c3ce92e7375e1314781ea8eeff1d5fdae323129f3986d27f5fcd9 1105868 rpm2cpio_4.12.0.2+dfsg1-2_amd64.deb
22bc1e3bd6a33202cc0b26e0b4a02c82f95ec7a0575205ae005281608b87e9d4 14080 rpm_4.12.0.2+dfsg1-2_amd64.buildinfo
5f14bf568c209889651cf3db4be8b4bef60296581b62ccff1100389c524727cd 1213434 rpm_4.12.0.2+dfsg1-2_amd64.deb
Files:
3cb632a650a74f9cdf94380a42471f01 3041 admin optional rpm_4.12.0.2+dfsg1-2.dsc
f2316ec9b4cc6edc9422c802c1fe2c78 36240 admin optional rpm_4.12.0.2+dfsg1-2.debian.tar.xz
27869a41a0bf5826e3a017d806000a0c 38692 debug extra debugedit-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
80ecaeec556965aa75762f8c57781524 1113870 admin optional debugedit_4.12.0.2+dfsg1-2_amd64.deb
c2547271b0aee24f0ef93a7becb3f879 1155714 libdevel extra librpm-dev_4.12.0.2+dfsg1-2_amd64.deb
b2cd9471187aae31b913a938a39fd02f 519870 debug extra librpm3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
e92623ab1fffa7825c0c41fb905516f4 1255380 libs optional librpm3_4.12.0.2+dfsg1-2_amd64.deb
bb077d5133e26a83806289f5db6c466c 171018 debug extra librpmbuild3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
c44eb88b90d8887a24f4ae56630fd592 1156730 libs optional librpmbuild3_4.12.0.2+dfsg1-2_amd64.deb
fc52ab4b7f058b51f6bf4aa031e343c5 201720 debug extra librpmio3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
ea458bfc0812f0b3e5ebae81eb22ac85 1166358 libs optional librpmio3_4.12.0.2+dfsg1-2_amd64.deb
bb098ba6c8486fb0550edb313cf067c1 18354 debug extra librpmsign3-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
35421f9164f420253879e1cb2f6f396c 1106216 libs optional librpmsign3_4.12.0.2+dfsg1-2_amd64.deb
078ce620eddbc1dedce47d7f2e70e3e7 147298 debug extra python-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
40c17ec68925941a1a47f7cfacccad83 1135754 python extra python-rpm_4.12.0.2+dfsg1-2_amd64.deb
8a7ff420be304c36a8732c77d84929b0 146434 debug extra python3-rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
6ef205aeded23e0fd307809c4a3d0839 1135988 python extra python3-rpm_4.12.0.2+dfsg1-2_amd64.deb
6ec810141712f850425c39eed83626f7 26708 debug extra rpm-common-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
8a9bc5518e79177e515e5b0d9c065cc4 1123738 admin optional rpm-common_4.12.0.2+dfsg1-2_amd64.deb
2ad11d343f06ed5f088be0ecf98e67f0 113570 debug extra rpm-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
b1a6af410fd3b9af0feaa116aabae210 1413206 localization optional rpm-i18n_4.12.0.2+dfsg1-2_all.deb
b0462ece66edab626d7b45f63e4cb3f7 21232 debug extra rpm2cpio-dbgsym_4.12.0.2+dfsg1-2_amd64.deb
ad833a3caed12765c9535e093fa315d8 1105868 admin optional rpm2cpio_4.12.0.2+dfsg1-2_amd64.deb
580bdedbfd04c77df2ce725ab3cad7e7 14080 admin optional rpm_4.12.0.2+dfsg1-2_amd64.buildinfo
1b45354ed34e48a4efd5f8d94e077639 1213434 admin optional rpm_4.12.0.2+dfsg1-2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=+yxY
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 02 May 2017 07:34:51 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jul 2 08:25:24 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.