tags 649463 + pending thanks Dear maintainer,
I've prepared an NMU for libpam-rsa (versioned as 0.8-9-2.3) and uploaded it to DELAYED/2. Please feel free to tell me if I should delay it longer. Regards. -- .''`. Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06 : :' : Debian GNU/Linux user, admin, and developer - http://www.debian.org/ `. `' Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe `-
--- libpam-rsa-0.8-9/debian/changelog
+++ libpam-rsa-0.8-9/debian/changelog
@@ -1,3 +1,12 @@
+libpam-rsa (0.8-9-2.3) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Fix "code to hash hostname and username is broken": openssl output has
+ changed, use shasum in the pamrsakp script, and depend on perl.
+ (Closes: #649463)
+
+ -- gregor herrmann <gre...@debian.org> Sun, 11 Mar 2012 23:46:48 +0100
+
libpam-rsa (0.8-9-2.2) unstable; urgency=low
* Non-maintainer upload.
--- libpam-rsa-0.8-9/debian/control
+++ libpam-rsa-0.8-9/debian/control
@@ -8,7 +8,7 @@
Package: libpam-rsa
Section: admin
Architecture: any
-Depends: ${shlibs:Depends}, ${misc:Depends}
+Depends: ${shlibs:Depends}, ${misc:Depends}, perl
Description: PAM module for local authentication with RSA keypairs
The pam_rsa PAM-module (also known as "poor man's smartcard") is for
local PAM-authentication with RSA keypairs. It cannot be used for
only in patch2:
unchanged:
--- libpam-rsa-0.8-9.orig/script/pamrsakp
+++ libpam-rsa-0.8-9/script/pamrsakp
@@ -23,8 +23,8 @@
# (c) 2006 Vesa-Matti Kari <hyperll...@laamanaama.helsinki.fi>
#
-O=${OPENSSL-openssl}
-CF=${PAMRSAKPCNF-/etc/security/pamrsakp.cnf}
+O=${OPENSSL:-openssl}
+CF=${PAMRSAKPCNF:-/etc/security/pamrsakp.cnf}
if [ $# -ne 6 ]; then
@@ -46,7 +46,7 @@
if [ x${HASHTYPE} = "xsha1" ]; then
- PRIVKEY=`echo -n ${USER} | ${O} dgst -sha1 | cut -b -8`.pem
+ PRIVKEY=`echo -n ${USER} | shasum -a 1 -t | cut -b -8`.pem
elif [ x${HASHTYPE} = "xnone" ]; then
PRIVKEY=${USER}.pem
else
@@ -60,7 +60,7 @@
fi
-HOSTHASH=`echo -n ${TARGETHOST} | ${O} dgst -sha1 | cut -b -8`
+HOSTHASH=`echo -n ${TARGETHOST} | shasum -a 1 -t | cut -b -8`
# Create the public and private key directories if they do not exist
signature.asc
Description: Digital signature
