Your message dated Sat, 13 Jun 2020 15:47:08 +0000
with message-id <e1jk8na-000ccn...@fasolo.debian.org>
and subject line Bug#961984: fixed in pagekite 0.5.9.3-2+deb10u1
has caused the Debian Bug report #961984,
regarding pagekite: Embedded SSL certificate expired
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
961984: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961984
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: pagekite
Version: 0.5.6d-1
Severity: serious
Pagekite on my freedombox stopped working a few days ago. After restart
I noticed this in the pagekite log from systemd:
mai 31 09:42:58 freedombox-betzy pagekite[3982]: ts=5ed36002;
t=2020-05-31T07:42:58; ll=31; info=Failed to connect;
FE=2a01:4f9:c010:ba1::1:443
mai 31 09:42:59 freedombox-betzy pagekite[3982]: ts=5ed36003;
t=2020-05-31T07:42:59; ll=32; err=Error in connect: Traceback (most recent call
last): File "/usr/lib/python2.7/dist-packages/pagekite/proto/conns.py", line
475, in _BackEnd data, parse = self._Connect(server, conns) File
"/usr/lib/python2.7/dist-packages/pagekite/proto/conns.py", line 335, in
_Connect self.fd.connect((sspec[0], int(sspec[1]))) File
"/usr/lib/python2.7/dist-packages/sockschain/__init__.py", line 1017, in
connect anonymous=(proxy[P_TYPE] == PROXY_TYPE_SSL_ANON)) File
"/usr/lib/python2.7/dist-packages/sockschain/__init__.py", line 929, in
__negotiatessl connected=True, verify_names=want_hosts) File
"/usr/lib/python2.7/dist-packages/sockschain/__init__.py", line 118, in
SSL_Connect if verify_names: nsock.do_handshake() File
"/usr/lib/python2.7/dist-packages/OpenSSL/SSL.py", line 1915, in do_handshake
self._raise_ssl_error(self._ssl, result) File
"/usr/lib/python2.7/dist-packages/OpenSSL/SSL.py", line 1647, in
_raise_ssl_error _raise_current_error() File
"/usr/lib/python2.7/dist-packages/OpenSSL/_util.py", line 54, in
exception_from_error_queue raise exception_type(errors) Error: [('SSL
routines', 'tls_process_server_certificate', 'certificate verify failed')]
mai 31 09:42:59 freedombox-betzy pagekite[3982]: ts=5ed36003;
t=2020-05-31T07:42:59; ll=33; err=Server response parsing failed: [('SSL
routines', 'tls_process_server_certificate', 'certificate verify failed')];
id=s1
mai 31 09:42:59 freedombox-betzy pagekite[3982]: ts=5ed36003;
t=2020-05-31T07:42:59; ll=34; eof=1; id=s1
mai 31 09:42:59 freedombox-betzy pagekite[3982]: ts=5ed36003;
t=2020-05-31T07:42:59; ll=35; info=Failed to connect; FE=95.216.158.189:443
I've been in contact with upstream, who pointed me to
<URL:
https://pagekite.wordpress.com/2020/05/30/tls-certificate-validation-issues/ >
explaining the situation. Sunil is on the case to fix this. A
workaround is to tell pagekite to use the Debian CA bundle.
I picked a very old version number, as this issue would be present also
in older Debian versions. I ran into it using Buster (version
0.5.9.3-2), but it is also present in testing and unstable, and probably
every existing pagekite expect the latest upstream version.
Setting severity seriuos as this break the default installation of
pagekite.
--
Happy hacking
Petter Reinholdtsen
--- End Message ---
--- Begin Message ---
Source: pagekite
Source-Version: 0.5.9.3-2+deb10u1
Done: Federico Ceratto <feder...@debian.org>
We believe that the bug you reported is fixed in the latest version of
pagekite, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 961...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Federico Ceratto <feder...@debian.org> (supplier of updated pagekite package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 10 Jun 2020 14:37:34 +0100
Source: pagekite
Binary: pagekite
Architecture: source all
Version: 0.5.9.3-2+deb10u1
Distribution: buster
Urgency: medium
Maintainer: FreedomBox packaging team
<freedombox-pkg-t...@lists.alioth.debian.org>
Changed-By: Federico Ceratto <feder...@debian.org>
Description:
pagekite - Make localhost servers publicly visible
Closes: 961984
Changes:
pagekite (0.5.9.3-2+deb10u1) buster; urgency=medium
.
[ Sunil Mohan Adapa ]
* Fix issue with expired internal certificates. Use
Debian certificates instead of internal certificate. (Closes: #961984)
Checksums-Sha1:
c326d8255147a4501983a3b612cf186ea71b78fc 2221 pagekite_0.5.9.3-2+deb10u1.dsc
96754ef5a64d2212e3ead7049e36dd5468808022 18000
pagekite_0.5.9.3-2+deb10u1.debian.tar.xz
9a5be8b92146d4a968a81c5277ad61068133164c 138448
pagekite_0.5.9.3-2+deb10u1_all.deb
729aafa6604771011390009e1c00580b82101bbe 6647
pagekite_0.5.9.3-2+deb10u1_amd64.buildinfo
Checksums-Sha256:
38ed67db9074ba7165a01f8904c740cfe850cc5638675daf77a298ba32800730 2221
pagekite_0.5.9.3-2+deb10u1.dsc
b516ebd2c9feae87aa7cf5ee93154e1833eebdb995328f8571253f9c9fbdacec 18000
pagekite_0.5.9.3-2+deb10u1.debian.tar.xz
baadfbc6639efe2e01c6d2f06ef7a8d36544134505eb9caf5fcf2666f0dc0c8c 138448
pagekite_0.5.9.3-2+deb10u1_all.deb
445aa29506ae883f983fdb2146431e86fda980457fdd3e996670ba01b36edc60 6647
pagekite_0.5.9.3-2+deb10u1_amd64.buildinfo
Files:
f8a03885043bdf39196bf886c5d7b5fb 2221 net optional
pagekite_0.5.9.3-2+deb10u1.dsc
1f8c1527ed15488a4b4ef25c1ca2862e 18000 net optional
pagekite_0.5.9.3-2+deb10u1.debian.tar.xz
30234b7eddc232fe5d5e2d7c35668c52 138448 net optional
pagekite_0.5.9.3-2+deb10u1_all.deb
53839d77e5e0b28ba823cb7143374454 6647 net optional
pagekite_0.5.9.3-2+deb10u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=+zEs
-----END PGP SIGNATURE-----
--- End Message ---
