From unknown Thu Jun 19 14:05:02 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#49706 <49706@debbugs.gnu.org> To: bug#49706 <49706@debbugs.gnu.org> Subject: Status: [PATCH] gnu: gmnisrv: Update to commit 32854b7. Reply-To: bug#49706 <49706@debbugs.gnu.org> Date: Thu, 19 Jun 2025 21:05:02 +0000 retitle 49706 [PATCH] gnu: gmnisrv: Update to commit 32854b7. reassign 49706 guix-patches submitter 49706 Sarah Morgensen severity 49706 normal tag 49706 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Fri Jul 23 04:08:35 2021 Received: (at submit) by debbugs.gnu.org; 23 Jul 2021 08:08:35 +0000 Received: from localhost ([127.0.0.1]:42220 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m6qEV-000582-GN for submit@debbugs.gnu.org; Fri, 23 Jul 2021 04:08:35 -0400 Received: from lists.gnu.org ([209.51.188.17]:57744) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m6qET-00057u-II for submit@debbugs.gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33090) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m6qET-00059D-EN for guix-patches@gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 Received: from out2.migadu.com ([2001:41d0:2:aacc::]:28449) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m6qEQ-0008QD-Hu for guix-patches@gnu.org; Fri, 23 Jul 2021 04:08:33 -0400 X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mgsn.dev; s=key1; t=1627027709; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=a98kIrRemIPBmKVMux2/VWr4Jt8HV92ShV3neWUHEPw=; b=W7SjKEe0N0Cgk3od5PSP7CiMRrYK23yMSVb8OeQIR9KEI+4ncx2g41zoMuIirUtA/Jbbr5 PczTwBA/wiM+mbs9GC7MvvIiVRlZr5jLfi4UrTC7BJGX/uxC74v4c+QTLl46o/CmmyGEsF Yk0RAGi4H3OBFiB+abRZkpGJwV3jXos= From: Sarah Morgensen To: guix-patches@gnu.org Subject: [PATCH] gnu: gmnisrv: Update to commit 32854b7. Date: Fri, 23 Jul 2021 01:08:28 -0700 Message-Id: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Migadu-Flow: FLOW_OUT X-Migadu-Auth-User: iskarian@mgsn.dev Received-SPF: pass client-ip=2001:41d0:2:aacc::; envelope-from=iskarian@mgsn.dev; helo=out2.migadu.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so "requires fresh certificates, which could break clients with strict trust-on-first-use policies." gnu/packages/web.scm (gmnisrv): Update to commit 32854b7. --- Hello Guix, There is one possibly breaking change in this update: > Use v3 X509 certificate > > This fixes an issue where rustls failed to validate the X509v1 certificate. > > Tested with Amfora, av-98, and titan (https://github.com/mkeeter/titan) > > This requires fresh certificates, which could break clients with strict > trust-on-first-use policies; unfortunately, it doesn't appear to be possible > to migrate v1 certificates to v3. Also, I'm not sure if this is the correct style for updating unversioned software, so if I missed something, please let me know! -- Sarah gnu/packages/web.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 12ba55cdc8..270ad31331 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -7968,8 +7968,8 @@ solution for any project's interface needs: (license license:expat))) (define-public gmnisrv - (let ((commit "d484ba0ab0020866535a44be5948c9482b8f2b8d") - (revision "1")) + (let ((commit "32854b79c73b278bf33eb5123abf1c36abdc7c01") + (revision "2")) (package (name "gmnisrv") (version (git-version "0" revision commit)) @@ -7981,7 +7981,7 @@ solution for any project's interface needs: (commit commit))) (sha256 (base32 - "11phipixsxx1jgm42agp76p5s68l0zj65kgb41vzaymgwcq79ivn")) + "0lbb3ablwkdcgm1cjr1hikr55y8gpl420nh8b8g9wn4abhm2xgr9")) (file-name (git-file-name name version)))) (build-system gnu-build-system) (arguments base-commit: 89ea0918a4a6cc9c250b85c0b713e471b7769c48 prerequisite-patch-id: 2d6692cc3cf8a733e69e6ff6b02863a160b03011 -- 2.31.1 From debbugs-submit-bounces@debbugs.gnu.org Sat Jul 24 09:29:46 2021 Received: (at 49706) by debbugs.gnu.org; 24 Jul 2021 13:29:46 +0000 Received: from localhost ([127.0.0.1]:45402 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7His-0007bk-3r for submit@debbugs.gnu.org; Sat, 24 Jul 2021 09:29:46 -0400 Received: from h87-96-130-155.cust.a3fiber.se ([87.96.130.155]:34370 helo=mail.yoctocell.xyz) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7Hip-0007bU-Ik for 49706@debbugs.gnu.org; Sat, 24 Jul 2021 09:29:44 -0400 From: Xinglu Chen DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=yoctocell.xyz; s=mail; t=1627133373; bh=fwEdFxU9qsc1Tw5ctpenckgTPZ/pmm12gMDd0Fn0fRI=; h=From:To:Subject:In-Reply-To:References:Date; b=YisshN17Ss8EOrl+fQv5Hvz13NAxb/CjX8it92Dv89mUijyJ4XKZad8WI00g0DY7h rJu8DY+T/P1G/sj7GptDsj7pDuKHWSXlgo7MF3wBzkavSdWsXJdVgbXkOEa1dMkmza hp3slwe42bWW5fnA3FH/QPiEWrQgv8fSeDPqHlK4= To: Sarah Morgensen , 49706@debbugs.gnu.org Subject: Re: [bug#49706] [PATCH] gnu: gmnisrv: Update to commit 32854b7. In-Reply-To: References: Date: Sat, 24 Jul 2021 15:29:30 +0200 Message-ID: <87h7gj3kn9.fsf@yoctocell.xyz> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 2.9 (++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: On Fri, Jul 23 2021, Sarah Morgensen wrote: > Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so > "requires fresh certificates, which could break clients with strict > trust-on-first-use policies." > > gnu/packages/web.scm [...] Content analysis details: (2.9 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: yoctocell.xyz (xyz)] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.4 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps X-Debbugs-Envelope-To: 49706 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 2.9 (++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: On Fri, Jul 23 2021, Sarah Morgensen wrote: > Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so > "requires fresh certificates, which could break clients with strict > trust-on-first-use policies." > > gnu/packages/web.scm [...] Content analysis details: (2.9 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record 2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs [URI: yoctocell.xyz (xyz)] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 0.4 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 1.0 BULK_RE_SUSP_NTLD Precedence bulk and RE: from a suspicious TLD -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager 0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On Fri, Jul 23 2021, Sarah Morgensen wrote: > Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so > "requires fresh certificates, which could break clients with strict > trust-on-first-use policies." > > gnu/packages/web.scm (gmnisrv): Update to commit 32854b7. > --- > Hello Guix, > > There is one possibly breaking change in this update: > >> Use v3 X509 certificate >> >> This fixes an issue where rustls failed to validate the X509v1 certif= icate. >> >> Tested with Amfora, av-98, and titan (https://github.com/mkeeter/tita= n) >> >> This requires fresh certificates, which could break clients with stri= ct >> trust-on-first-use policies; unfortunately, it doesn't appear to be p= ossible >> to migrate v1 certificates to v3. > > Also, I'm not sure if this is the correct style for updating unversioned > software, so if I missed something, please let me know! It is usually has the format VERSION-REVISION.COMMIT, where COMMIT is the first 7 characters of the commit id. In this case the commit summary would be: gnu: gmnisrv: Update to 0-2.32854b7. If you use Emacs, there is a Yasnippet snippet for generating commit messages in Magit, just type =E2=80=9Cupdate=E2=80=9D in the commit bu= ffer. I don=E2=80=99t use =E2=80=98gmnisrv=E2=80=99, so I can=E2=80=99t really te= st it, but it builds fine for me. :) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJJBAEBCAAzFiEEAVhh4yyK5+SEykIzrPUJmaL7XHkFAmD8FboVHHB1YmxpY0B5 b2N0b2NlbGwueHl6AAoJEKz1CZmi+1x5nbUP/2UWjSXV2clPWQoyg+rugFovM7LO ZCEhLbJJNshbNudTD8WWFiwgw4g/KL9t4za3vic3gq06EncLvWdj61SNF92pDlLu WBL0/048OK0W+iy+JbU87bJvxXq+8ka2K0NE1embymIyNVAuM0dCv9sUoPAU8qHJ vkzlpC6T8SLvNog4xk1gL5+VmTtswaK2iTU8Y5ZYuNYEhwZd6UkAr0MNUb4RCMH5 9WK5faI28Hr5ACdeyNVL6ubnNZ+tpkWsi+uHsPTR5rNyyotZndT5T7efSNajyaE1 ybA5gYd5Kd7O8PSjXpiS1tCBuWjBtI6MMX8BONKCyhYO6zw9JOrXPDge3BGfxBlD 0io8I0TIciw/DRxzwMBzMLRbrRaN1E62YmlcrdZH6Ca4ozeMt+Q7nruecIyUOGLi wDdPhAVlNFp2El311eczeTK+TtmdBlhD0A58cOdAczzjBHyV6gHZr/BYdAzijbwk 363bi0+vX+0z2RMvnytL2Eo6B/p4bCYSJnSjUJoQBKkGEfnjbctynPQntB5VbLf8 hg4f+b+f6y57do0xnr7y4RpENWZqKH4/HI88IPTmxIl3OeyZ4/YQHZ+Ymx/brJTT eyaTawjo6EN2taMvl3X5IgPIw+uUi26m//5JwLGry4qvc05V6AD6karF58mB9bZF X0JyJF176QjEERrv =Xi7d -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Sat Jul 24 21:43:05 2021 Received: (at 49706) by debbugs.gnu.org; 25 Jul 2021 01:43:05 +0000 Received: from localhost ([127.0.0.1]:47258 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7TAX-00075U-0I for submit@debbugs.gnu.org; Sat, 24 Jul 2021 21:43:05 -0400 Received: from out2.migadu.com ([188.165.223.204]:36974) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7TAT-000753-Ur for 49706@debbugs.gnu.org; Sat, 24 Jul 2021 21:43:04 -0400 X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mgsn.dev; s=key1; t=1627177380; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1LjQkeeo00FfxaBgK6x7UMz20zSFqjMi4P3lB8pihWc=; b=CbmPJfxYewzqIZHaPmqgbTLBqzYxOyVjSY34ExYrq+ipx0O/CFQwyhStRlAdRuPxnEbAY5 grz8BvKHzRy3+yMjId0G8pQ5MBTCOGYjMvw4k0FJZPa6w5A9ijJwVMr1wWfrKVXOEMaP0G jqUH7flbd62mDYoDVoxLqgtWOhnM1J0= From: Sarah Morgensen To: 49706@debbugs.gnu.org Subject: [PATCH v2] gnu: gmnisrv: Update to 0-2.32854b7. Date: Sat, 24 Jul 2021 18:42:58 -0700 Message-Id: In-Reply-To: References: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Migadu-Flow: FLOW_OUT X-Migadu-Auth-User: iskarian@mgsn.dev X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 49706 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so "requires fresh certificates, which could break clients with strict trust-on-first-use policies." gnu/packages/web.scm (gmnisrv): Update to 0-2.32854b7. --- gnu/packages/web.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 12ba55cdc8..270ad31331 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -7968,8 +7968,8 @@ solution for any project's interface needs: (license license:expat))) (define-public gmnisrv - (let ((commit "d484ba0ab0020866535a44be5948c9482b8f2b8d") - (revision "1")) + (let ((commit "32854b79c73b278bf33eb5123abf1c36abdc7c01") + (revision "2")) (package (name "gmnisrv") (version (git-version "0" revision commit)) @@ -7981,7 +7981,7 @@ solution for any project's interface needs: (commit commit))) (sha256 (base32 - "11phipixsxx1jgm42agp76p5s68l0zj65kgb41vzaymgwcq79ivn")) + "0lbb3ablwkdcgm1cjr1hikr55y8gpl420nh8b8g9wn4abhm2xgr9")) (file-name (git-file-name name version)))) (build-system gnu-build-system) (arguments base-commit: 89ea0918a4a6cc9c250b85c0b713e471b7769c48 prerequisite-patch-id: 2d6692cc3cf8a733e69e6ff6b02863a160b03011 -- 2.31.1 From debbugs-submit-bounces@debbugs.gnu.org Sun Jul 25 06:31:11 2021 Received: (at 49706-done) by debbugs.gnu.org; 25 Jul 2021 10:31:11 +0000 Received: from localhost ([127.0.0.1]:47652 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7bPb-0005mo-6E for submit@debbugs.gnu.org; Sun, 25 Jul 2021 06:31:11 -0400 Received: from mugam.systemreboot.net ([139.59.75.54]:37692) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m7bPX-0005me-Mj for 49706-done@debbugs.gnu.org; Sun, 25 Jul 2021 06:31:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=T8QPdMT60AsJxDjZI5B4eRTTeZDGtwQTTni09BEVIt8=; b=MzvS7GDcoU9i1Ltyi2Y/5uj6Rr +CQu1d7wDlOESHsc2EH3AtrhUVBChRm/B+dasuWW/N/wO/sXA7+SS3sPSCfwn2F/QjHmuZ+WIVGwB h4zLRCBaioTJhcsGYRdUTj3dQHhXaa+1526EtSK91m2AQGTQr7mqqCduUh2+GDb5yiZYJvjfG4XYQ /P7GCvKnN1hBBUOXi/UAIKHhQVh6xsJrj9gLJMdBDg6DS0s0BpfjJuc38sS+aB+0u9wcm1LZLBE9T n1ODQCuT7Rjnv2HjTnEqjVeh2CoCPYcukM5Drd67aJ6OGaj4Csf6ejl6grb+SgAvvMYjjn1r38eEd q9NxQB1Q==; Received: from [192.168.2.1] (helo=steel) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1m7bPU-000eIS-Gt; Sun, 25 Jul 2021 16:01:04 +0530 From: Arun Isaac To: Sarah Morgensen , 49706-done@debbugs.gnu.org Subject: Re: [bug#49706] [PATCH v2] gnu: gmnisrv: Update to 0-2.32854b7. In-Reply-To: References: Date: Sun, 25 Jul 2021 16:01:03 +0530 Message-ID: <87im0yfzx4.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 49706-done Cc: Xinglu Chen X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain Hi Sarah and Xinglu, Thanks for working on this patch! I have pushed this with the following two minor changes. 1. Added copyright header for Sarah. > Update to latest commit. Gmnisrv uses v3 X509 certificates now, and so 2. Downcased Gmnisrv to gmnisrv since that seems to be the correct capitalization according to upstream. Regards, Arun --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFPBAEBCAA5FiEEf3MDQ/Lwnzx3v3nTLiXui2GAK7MFAmD9PWcbHGFydW5pc2Fh Y0BzeXN0ZW1yZWJvb3QubmV0AAoJEC4l7othgCuzzXEIAIF5NM+2VZq4+wJNWBVp qjoDURDPDOeyxAximS9a2iV91j+CZLS6p5MXCtfF+kxbRYKha7NMGBcbSswetGuK oJXck37eKX8jNCjpumU4Xnitp08r/3tuobbLaBEjqa+YNphkMKZ/L31tFAGyzs3w LhqjQuLXDeabBif2opdMM9lSfs3XyfjJBQlatYxqKZORclNhNCUt1ItYrmdWQnqs /5kPZ0DV/QqZVlZUAz5RcyfYfq/rCtp07jNc6FB6RW8Ds9RSf+CIMbkdA/Cqdp+Y ZGBfOedAJuf8DX8SEOtvjCRepPm0+lYHwGaq9xrSlVqbGYwP0xz141TvZxS5JL2e OQE= =nauw -----END PGP SIGNATURE----- --=-=-=-- From unknown Thu Jun 19 14:05:02 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 22 Aug 2021 11:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator