Debian Bug report logs - #885695
golang-github-tjfoc-gmsm: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: submit@bugs.debian.org

Subject: golang-github-tjfoc-gmsm: please make the build reproducible

Date: Fri, 29 Dec 2017 09:00:14 +0000

[Message part 1 (text/plain, inline)]

Source: golang-github-tjfoc-gmsm
Version: 1.1-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that golang-github-tjfoc-gmsm could not be built reproducibly.

This is because it ships (random) test output. Worryingly, one of
these is a public/private key pair which I hope nobody is using!

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[golang-github-tjfoc-gmsm.diff.txt (text/plain, attachment)]

Message #10 received at 885695-close@bugs.debian.org (full text, mbox, reply):

From: Alexandre Viau <aviau@debian.org>

To: 885695-close@bugs.debian.org

Subject: Bug#885695: fixed in golang-github-tjfoc-gmsm 1.1-4

Date: Fri, 26 Jan 2018 19:34:30 +0000

Source: golang-github-tjfoc-gmsm
Source-Version: 1.1-4

We believe that the bug you reported is fixed in the latest version of
golang-github-tjfoc-gmsm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 885695@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alexandre Viau <aviau@debian.org> (supplier of updated golang-github-tjfoc-gmsm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Jan 2018 14:15:25 -0500
Source: golang-github-tjfoc-gmsm
Binary: golang-github-tjfoc-gmsm-dev
Architecture: source
Version: 1.1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>
Changed-By: Alexandre Viau <aviau@debian.org>
Description:
 golang-github-tjfoc-gmsm-dev - GM SM2/3/4 library based for Golang
Closes: 885695
Changes:
 golang-github-tjfoc-gmsm (1.1-4) unstable; urgency=medium
 .
   [ Chris Lamb ]
   * Dont ship .pem files (Closes: #885695)
 .
   [ Alexandre Viau ]
   * Prepare upload.
Checksums-Sha1:
 6af52918faa90c25bf5a8e9dcf2307bbc7f93845 2231 golang-github-tjfoc-gmsm_1.1-4.dsc
 bdcdab0a3f9413e5d66b773b8754efaaf96b7384 1852 golang-github-tjfoc-gmsm_1.1-4.debian.tar.xz
 c6c8411a2c7cfa561655dc7bdf68fa8be22c6662 5867 golang-github-tjfoc-gmsm_1.1-4_source.buildinfo
Checksums-Sha256:
 a7947b6be7e9ab188d952ff2a6cb334bab75688fc7ba58d900e62c491f4daa60 2231 golang-github-tjfoc-gmsm_1.1-4.dsc
 5253a62cb1f0db3d7369d40fd4f83486d83cdfd18f3bfe9fee8c55b9d8b62e98 1852 golang-github-tjfoc-gmsm_1.1-4.debian.tar.xz
 8bc0367c4b62d76861cb260136f77516d7af25c5a8506d33eef5ab3d6acfa4e5 5867 golang-github-tjfoc-gmsm_1.1-4_source.buildinfo
Files:
 2440e968fe8e558a864d7cb72d482af2 2231 devel optional golang-github-tjfoc-gmsm_1.1-4.dsc
 b58de59cb7fdfdea4486ea9f33dd852f 1852 devel optional golang-github-tjfoc-gmsm_1.1-4.debian.tar.xz
 f9cd8c9840ba68a12fef9822bc2d4c4a 5867 devel optional golang-github-tjfoc-gmsm_1.1-4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=h3wt
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.