Debian Bug report logs - #942915
ca-certificates: Python2 removal in sid/bullseye

Toggle useless messages

Message #5 received at maintonly@bugs.debian.org (full text, mbox, reply):

From: morph@debian.org

To: maintonly@bugs.debian.org

Subject: ca-certificates: Python2 removal in sid/bullseye

Date: Wed, 23 Oct 2019 02:33:19 +0000

Source: ca-certificates
Version: 20190110
Severity: normal
Tags: sid bullseye
User: debian-python@lists.debian.org
Usertags: py2removal

Python2 becomes end-of-live upstream, and Debian aims to remove
Python2 from the distribution, as discussed in
https://lists.debian.org/debian-python/2019/07/msg00080.html

Your package either build-depends, depends on Python2, or uses Python2
in the autopkg tests (the specific reason can be found searching this
source package in
https://people.debian.org/~morph/mass-bug-py2removal_take2.txt ).
Please stop using Python2, and fix this issue by one of the following
actions.

- Convert your Package to Python3. This is the preferred option.  In
  case you are providing a Python module foo, please consider dropping
  the python-foo package, and only build a python3-foo package.  Please
  don't drop Python2 modules, which still have reverse dependencies,
  just document them.
  
  This is the preferred option.

- If the package is dead upstream, cannot be converted or maintained
  in Debian, it should be removed from the distribution.  If the
  package still has reverse dependencies, raise the severity to
  "serious" and document the reverse dependencies with the BTS affects
  command.  If the package has no reverse dependencies, confirm that
  the package can be removed, reassign this issue to ftp.debian.org,
  make sure that the bug priority is set to normal and retitle the
  issue to "RM: PKG -- removal triggered by the Python2 removal".

- If the package has still many users (popcon >= 300), or is needed to
  build another package which cannot be removed, document that by
  adding the "py2keep" user tag (not replacing the py2remove tag),
  using the debian-python@lists.debian.org user.  Also any
  dependencies on an unversioned python package (python, python-dev)
  must not be used, same with the python shebang.  These have to be
  replaced by python2/python2.7 dependencies and shebang.

  This is the least preferred option.

If there are questions, please refer to the wiki page for the removal:
https://wiki.debian.org/Python/2Removal, or ask for help on IRC
#debian-python, or the debian-python@lists.debian.org mailing list.

Message #12 received at 942915@bugs.debian.org (full text, mbox, reply):

From: Gianfranco Costamagna <locutusofborg@debian.org>

To: 942915@bugs.debian.org

Subject: Re: ca-certificates: Python2 removal in sid/bullseye

Date: Wed, 3 Jun 2020 13:18:15 +0200

control: tags -1 patch

Since the Ubuntu patch is really trivial, I don't see any reason for delaying this more, specially because this is a core-component

diff -pruN 20190110/debian/changelog 20190110ubuntu1/debian/changelog
--- 20190110/debian/changelog	2019-01-11 01:31:31.000000000 +0000
+++ 20190110ubuntu1/debian/changelog	2020-03-30 10:09:50.000000000 +0000
@@ -1,3 +1,9 @@
+ca-certificates (20190110ubuntu1) focal; urgency=medium
+
+  * Build using python3.
+
+ -- Matthias Klose <doko@ubuntu.com>  Mon, 30 Mar 2020 12:09:50 +0200
+
 ca-certificates (20190110) unstable; urgency=high
 
   * debian/control:
diff -pruN 20190110/debian/control 20190110ubuntu1/debian/control
--- 20190110/debian/control	2019-01-11 01:31:31.000000000 +0000
+++ 20190110ubuntu1/debian/control	2020-03-30 10:09:42.000000000 +0000
@@ -5,7 +5,7 @@ Maintainer: Michael Shuler <michael@pban
 Uploaders: Raphael Geissert <geissert@debian.org>,
            Thijs Kinkhorst <thijs@debian.org>
 Build-Depends: debhelper-compat (= 12), po-debconf
-Build-Depends-Indep: python, openssl
+Build-Depends-Indep: python3, openssl
 Standards-Version: 4.3.0.1
 Vcs-Git: https://salsa.debian.org/debian/ca-certificates.git
 Vcs-Browser: https://salsa.debian.org/debian/ca-certificates
diff -pruN 20190110/mozilla/certdata2pem.py 20190110ubuntu1/mozilla/certdata2pem.py
--- 20190110/mozilla/certdata2pem.py	2019-01-11 01:31:31.000000000 +0000
+++ 20190110ubuntu1/mozilla/certdata2pem.py	2020-03-30 10:09:28.000000000 +0000
@@ -1,4 +1,4 @@
-#!/usr/bin/python
+#!/usr/bin/python3
 # vim:set et sw=4:
 #
 # certdata2pem.py - splits certdata.txt into multiple files
diff -pruN 20190110/mozilla/Makefile 20190110ubuntu1/mozilla/Makefile
--- 20190110/mozilla/Makefile	2018-10-13 14:07:11.000000000 +0000
+++ 20190110ubuntu1/mozilla/Makefile	2020-03-30 10:09:50.000000000 +0000
@@ -3,7 +3,7 @@
 #
 
 all:
-	python certdata2pem.py
+	python3 certdata2pem.py
 
 clean:
 	-rm -f *.crt

On Wed, 23 Oct 2019 02:33:19 +0000 morph@debian.org wrote:
> Source: ca-certificates
> Version: 20190110
> Severity: normal
> Tags: sid bullseye
> User: debian-python@lists.debian.org
> Usertags: py2removal
> 
> Python2 becomes end-of-live upstream, and Debian aims to remove
> Python2 from the distribution, as discussed in
> https://lists.debian.org/debian-python/2019/07/msg00080.html
> 
> Your package either build-depends, depends on Python2, or uses Python2
> in the autopkg tests (the specific reason can be found searching this
> source package in
> https://people.debian.org/~morph/mass-bug-py2removal_take2.txt ).
> Please stop using Python2, and fix this issue by one of the following
> actions.
> 
> - Convert your Package to Python3. This is the preferred option.  In
>   case you are providing a Python module foo, please consider dropping
>   the python-foo package, and only build a python3-foo package.  Please
>   don't drop Python2 modules, which still have reverse dependencies,
>   just document them.
>   
>   This is the preferred option.
> 
> - If the package is dead upstream, cannot be converted or maintained
>   in Debian, it should be removed from the distribution.  If the
>   package still has reverse dependencies, raise the severity to
>   "serious" and document the reverse dependencies with the BTS affects
>   command.  If the package has no reverse dependencies, confirm that
>   the package can be removed, reassign this issue to ftp.debian.org,
>   make sure that the bug priority is set to normal and retitle the
>   issue to "RM: PKG -- removal triggered by the Python2 removal".
> 
> - If the package has still many users (popcon >= 300), or is needed to
>   build another package which cannot be removed, document that by
>   adding the "py2keep" user tag (not replacing the py2remove tag),
>   using the debian-python@lists.debian.org user.  Also any
>   dependencies on an unversioned python package (python, python-dev)
>   must not be used, same with the python shebang.  These have to be
>   replaced by python2/python2.7 dependencies and shebang.
> 
>   This is the least preferred option.
> 
> If there are questions, please refer to the wiki page for the removal:
> https://wiki.debian.org/Python/2Removal, or ask for help on IRC
> #debian-python, or the debian-python@lists.debian.org mailing list.
> 
> 
> 

Message #19 received at 942915@bugs.debian.org (full text, mbox, reply):

From: Gianfranco Costamagna <locutusofborg@debian.org>

To: 942915@bugs.debian.org

Subject: Re: ca-certificates: Python2 removal in sid/bullseye

Date: Wed, 3 Jun 2020 13:25:19 +0200

Hello,

the patch is now committed on the shared git, but I don't plan to upload it.
(I don't like to touch native packages when possible)

G.

Message #24 received at 942915@bugs.debian.org (full text, mbox, reply):

From: Michael Shuler <michael@pbandjelly.org>

To: Gianfranco Costamagna <locutusofborg@debian.org>, 942915@bugs.debian.org

Subject: Re: Bug#942915: ca-certificates: Python2 removal in sid/bullseye

Date: Wed, 3 Jun 2020 08:48:17 -0500

tags 942915 + pending
thanks

On 6/3/20 6:25 AM, Gianfranco Costamagna wrote:
> 
> the patch is now committed on the shared git, but I don't plan to upload it.
> (I don't like to touch native packages when possible)

I was just looking at this exact change last night, thanks for the 
commit. It wasn't clear to me that python3 could be expected to be 
installed on a minimal unstable OS, since the python wiki page lists, 
"Debian Unstable contains some 2.x and 3.x, python2 is being removed".

Works for me to include in unstable, since the python2 removal is on the 
way, but may result in a little fallout until removal is completed.

Kind regards,
Michael

Message #35 received at 942915@bugs.debian.org (full text, mbox, reply):

From: peter green <plugwash@p10link.net>

To: 942915@bugs.debian.org

Cc: control@bugs.debian.org

Subject: ca-certificates: Python2 removal in sid/bullseye

Date: Tue, 15 Sep 2020 23:30:03 +0100

severity 942915 serious
thanks

The "python" binary package is no longer available in testing or unstable (in unstable it's present as a cruft package
but uninstallable, in testing it's completely gone)

Message #42 received at 942915-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 942915-close@bugs.debian.org

Subject: Bug#942915: fixed in ca-certificates 20210119

Date: Tue, 19 Jan 2021 10:48:29 +0000

Source: ca-certificates
Source-Version: 20210119
Done: Julien Cristau <jcristau@debian.org>

We believe that the bug you reported is fixed in the latest version of
ca-certificates, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 942915@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Cristau <jcristau@debian.org> (supplier of updated ca-certificates package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 19 Jan 2021 11:11:04 +0100
Source: ca-certificates
Architecture: source
Version: 20210119
Distribution: unstable
Urgency: medium
Maintainer: Julien Cristau <jcristau@debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Closes: 942915 962079 962596 976406
Changes:
 ca-certificates (20210119) unstable; urgency=medium
 .
   [ Julien Cristau ]
   * New maintainer (closes: #976406)
   * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority
     bundle to version 2.46.
     The following certificate authorities were added (+):
     + "certSIGN ROOT CA G2"
     + "e-Szigno Root CA 2017"
     + "Microsoft ECC Root Certificate Authority 2017"
     + "Microsoft RSA Root Certificate Authority 2017"
     + "NAVER Global Root Certification Authority"
     + "Trustwave Global Certification Authority"
     + "Trustwave Global ECC P256 Certification Authority"
     + "Trustwave Global ECC P384 Certification Authority"
     The following certificate authorities were removed (-):
     - "EE Certification Centre Root CA"
     - "GeoTrust Universal CA 2"
     - "LuxTrust Global Root 2"
     - "OISTE WISeKey Global Root GA CA"
     - "Staat der Nederlanden Root CA - G2" (closes: #962079)
     - "Taiwan GRCA"
     - "Verisign Class 3 Public Primary Certification Authority - G3"
 .
   [ Michael Shuler ]
   * mozilla/blacklist:
     Revert Symantec CA blacklist (#911289). Closes: #962596
     The following root certificates were added back (+):
     + "GeoTrust Primary Certification Authority - G2"
     + "VeriSign Universal Root Certification Authority"
 .
   [ Gianfranco Costamagna ]
   * debian/{rules,control}:
     Merge Ubuntu patch from Matthias Klose to use Python3 during build.
     Closes: #942915
Checksums-Sha1:
 49e22e00ef8c048e6380f9470d43dc6325679306 1868 ca-certificates_20210119.dsc
 c9875aa16e42981c6975e59a11727539053e2299 232964 ca-certificates_20210119.tar.xz
Checksums-Sha256:
 51e5c099ab976f50f4d2f3c5ea0ad49853024cdb3e630322cbd7e02b05a034f4 1868 ca-certificates_20210119.dsc
 daa3afae563711c30a0586ddae4336e8e3974c2b627faaca404c4e0141b64665 232964 ca-certificates_20210119.tar.xz
Files:
 0fc9d8d512961e7e9d5eab6d463555d8 1868 misc optional ca-certificates_20210119.dsc
 c02582bf9ae338e558617291897615eb 232964 misc optional ca-certificates_20210119.tar.xz

-----BEGIN PGP SIGNATURE-----
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=qj/c
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.