October 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 https://bugzilla.suse.com/show_bug.cgi?id=1191220#c7 --- Comment #7 from Marcus Meissner <meissner(a)suse.com> --- for mono my suspicion is it has a similar certificate chain validation bug in its embedded boringssl than earlier openssl, e.g. cannot terminate chain validation if they find the first valid certificate. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191154] Cannot update 29.9.2021
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191154 Michael Schr�der <mls(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mls(a)suse.com Assignee|mls(a)suse.com |anicka(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190326] Update to kernel 5.14 makes disks disapear/system unbootable
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190326 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs(a)opensuse.org |dracut-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190326] Update to kernel 5.14 makes disks disapear/system unbootable
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190326 https://bugzilla.suse.com/show_bug.cgi?id=1190326#c20 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com --- Comment #20 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Thomas Blume from comment #19) > (In reply to Olaf Hering from comment #18) > > (In reply to Thomas Blume from comment #17) > > > Does that contain the right dependency for xen_netfront/blkfront? > > > > See comment#15 (and comment#13) for three live systems that show the issue. > > Ok thanks, I can see this: > > --> > dracut-install: Handling > /lib/modules/5.14.5-7.g24dfde2-default//kernel/drivers/block/xen-blkfront.ko. > xz > dracut-install: No symbol or path match for > '/lib/modules/5.14.5-7.g24dfde2-default//kernel/drivers/block/xen-blkfront. > ko.xz' > --< > > which comes from dracut-install.c > > --> > if (!check_module_path(path) || !check_module_symbols(mod)) { > log_debug("No symbol or path match for '%s'", path); > return 1; > } > --< > > For kernel 5.3.18-59.19-default this is different: > > --> > dracut-install: Handling > /lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen-blkfront.ko.xz > dracut-install: Module xen_blkfront: symbol blk_cleanup_queue matched > inclusion filter > dracut-install: dracut_install > '/lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen-blkfront.ko.xz' > '/lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen-blkfront.ko.xz' > dracut-install: > dracut_install('/lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen- > blkfront.ko.xz', > '/lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen-blkfront.ko.xz') > dracut-install: dracut_install ret = 0 > dracut-install: cp > '/lib/modules/5.3.18-59.19-default//kernel/drivers/block/xen-blkfront.ko.xz' > '/var/tmp/dracut.dTMGuu/initramfs/lib/modules/5.3.18-59.19-default//kernel/ > drivers/block/xen-blkfront.ko.xz' > dracut-install: cp ret = 0 > dracut-install: dracut_install ret = 0 > dracut-install: dracut_install 'xen_blkfront' OK > --< > > Not really sure whether dracut is to blame therefore. FWICT, the relevant lines are: local _blockfuncs='ahci_platform_get_resources|ata_scsi_ioctl|scsi_add_host|blk_cleanup_queue|register_mtd_blktrans|... ... dracut_instmods -o -s "${_blockfuncs}" "=drivers" It goes through all driver modules and installs those which have symbols in the given list. xen-blkfront was ported away from blk_cleanup_queue to blk_cleanup_disk in 3b62c140e93d32, so it no longer matches. Adding blk_cleanup_disk to the list might be the right fix. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 https://bugzilla.suse.com/show_bug.cgi?id=1191220#c6 --- Comment #6 from Thorsten Kukuk <kukuk(a)suse.com> --- (In reply to Marcus Meissner from comment #3) > https://defiant.thkukuk.de should return the SSL certificate chain from > letsencrypt (currently does not seem to) Thanks, looks like the example for nginx was wrong, fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 https://bugzilla.suse.com/show_bug.cgi?id=1191220#c5 --- Comment #5 from Martin Li��ka <martin.liska(a)suse.com> --- Just for the reference, there's Let's Encrypt announcement about the expiry: https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190840] Login window flashes briefly and turns all black
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190840 https://bugzilla.suse.com/show_bug.cgi?id=1190840#c4 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com Flags| |needinfo?(iqgrande(a)gmail.co | |m) --- Comment #4 from Fabian Vogt <fvogt(a)suse.com> --- Does it work with a new user account? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 Michael Brookhuis <michael.brookhuis(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |michael.brookhuis(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 https://bugzilla.suse.com/show_bug.cgi?id=1191220#c4 --- Comment #4 from Martin Li��ka <martin.liska(a)suse.com> --- (In reply to Thorsten Kukuk from comment #1) > This looks like the same problem as all non-webbrowser based tools we have: > > kukuk@f05:~> curl https://defiant.thkukuk.de > curl: (60) SSL certificate problem: unable to get local issuer certificate > More details here: https://curl.haxx.se/docs/sslcerts.html Thanks for help. In the case of seznam.cz, I can get it via curl: $ curl -v https://seznam.cz * Trying 77.75.74.176:443... * Connected to seznam.cz (77.75.74.176) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): * TLSv1.3 (IN), TLS handshake, Certificate (11): * TLSv1.3 (IN), TLS handshake, CERT verify (15): * TLSv1.3 (IN), TLS handshake, Finished (20): * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): * TLSv1.3 (OUT), TLS handshake, Finished (20): * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: CN=www.seznam.cz * start date: Aug 9 14:01:43 2021 GMT * expire date: Nov 7 14:01:41 2021 GMT * subjectAltName: host "seznam.cz" matched cert's "seznam.cz" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. * Using HTTP2, server supports multiplexing * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x557325389bd0) > GET / HTTP/2 > Host: seznam.cz > user-agent: curl/7.79.1 > accept: */* > * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * old SSL session ID is stale, removing * Connection state changed (MAX_CONCURRENT_STREAMS == 128)! < HTTP/2 302 < server: nginx < date: Fri, 01 Oct 2021 11:49:11 GMT < content-type: text/html < content-length: 138 < location: https://www.seznam.cz/ < <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html> * Connection #0 to host seznam.cz left intact While I can confirm curl https://defiant.thkukuk.de really does not work for me. So, it's maybe something different? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190926] Systemd hardening effort breaks chrony
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190926 Reinhard Max <max(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |max(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0