Comment 19 for bug 19835

Message-ID: <email address hidden>
Date: Thu, 03 Nov 2005 09:35:59 +0100
From: Christoph Martin <email address hidden>
To: <email address hidden>
Subject: [Fwd: Bug#314465: [Pkg-openssl-devel] Bug#314465: CA.pl and openssl.cnf
 default to insecure MD5 digest]

--------------enig75D9DBF46314362351D48085
Content-Type: multipart/mixed;
 boundary="------------040409040308090800070506"

This is a multi-part message in MIME format.
--------------040409040308090800070506
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

version 0.9.8-1

--
============================================================================
Christoph Martin, Leiter der EDV der Verwaltung, Uni-Mainz, Germany
 Internet-Mail: <email address hidden>
  Telefon: +49-6131-3926337
      Fax: +49-6131-3922856

--------------040409040308090800070506
Content-Type: message/rfc822;
 name="Bug#314465: [Pkg-openssl-devel] Bug#314465: CA.pl and openssl.cnf defaultto insecure
 MD5 digest"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline; filename="Bug#314465: [Pkg-openssl-devel] Bug#314465: CA.pl and
 openssl.cnf defaultto insecure MD5 digest"

Return-Path: <email address hidden>
Received: from mailgate1.zdv.Uni-Mainz.DE (mailgate1.zdv.Uni-Mainz.DE [134.93.178.129])
 by wintermute.verwaltung.uni-mainz.de (8.13.4/8.13.4/Debian-3) with ESMTP id jA2KSNh0028153
 for <email address hidden>; Wed, 2 Nov 2005 21:28:23 +0100
Received: from exfront01.zdv.Uni-Mainz.DE (exfront01.zdv.Uni-Mainz.DE [134.93.176.49])
 by mailgate1.zdv.Uni-Mainz.DE (Postfix) with ESMTP id 05D333000588
 for <email address hidden>; Wed, 2 Nov 2005 21:28:22 +0100 (CET)
Received: from spamgate01.zdv.uni-mainz.de ([134.93.177.67]) by exfront01.zdv.Uni-Mainz.DE with
 Microsoft SMTPSVC(6.0.3790.1830); Wed, 2 Nov 2005 21:16:05 +0100
Received: from haydn.debian.org ([192.25.206.28])
 by spamgate01.zdv.uni-mainz.de with ESMTP; 02 Nov 2005 21:16:05 +0100
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AAAAAL+saEOCKYNkAQEBAQEGBAYHAxtD
X-IronPort-AV: i="3.97,283,1125871200";
   d="scan'208"; a="2608164:sNHT20050975"
Received: from localhost ([127.0.0.1]:56558 helo=haydn.debian.org)
 by haydn.debian.org with esmtp (Exim 4.50)
 id 1EXP1Z-0000pZ-7h; Wed, 02 Nov 2005 20:16:01 +0000
Received: from spohr.debian.org ([140.211.166.43]:40311 ident=mail)
 by haydn.debian.org with esmtp (Exim 4.50) id 1EXP1T-0000p6-MG
 for <email address hidden>; Wed, 02 Nov 2005 20:15:53 +0000
Received: from debbugs by spohr.debian.org with local (Exim 3.36 1 (Debian))
 id 1EXP1S-0006wT-00; Wed, 02 Nov 2005 12:15:50 -0800
X-Loop: <email address hidden>
Resent-From: Kurt Roeckx <email address hidden>
Resent-To: <email address hidden>
Resent-CC: Debian OpenSSL Team <email address hidden>
Resent-Date: Wed, 02 Nov 2005 20:15:49 UTC
Resent-Message-ID: <email address hidden>
X-Debian-PR-Message: report 314465
X-Debian-PR-Package: openssl
X-Debian-PR-Keywords: security
Received: via spool by <email address hidden> id=B314465.11309502539421
 (code B ref 314465); Wed, 02 Nov 2005 20:15:49 UTC
Received: (at 314465) by bugs.debian.org; 2 Nov 2005 16:50:53 +0000
Received: from hoboe2bl1.telenet-ops.be [195.130.137.73]
 by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
 id 1EXLp7-0002Rb-00; Wed, 02 Nov 2005 08:50:53 -0800
Received: from localhost (localhost.localdomain [127.0.0.1])
 by hoboe2bl1.telenet-ops.be (Postfix) with SMTP
 id 810283816E; Wed, 2 Nov 2005 17:50:51 +0100 (CET)
Received: from Q.roeckx.be (dD5775F4A.access.telenet.be [213.119.95.74])
 by hoboe2bl1.telenet-ops.be (Postfix) with ESMTP
 id 6501F38147; Wed, 2 Nov 2005 17:50:51 +0100 (CET)
Received: by Q.roeckx.be (Postfix, from userid 501)
 id AEBA726136; Wed, 02 Nov 2005 17:50:50 +0100 (CET)
Date: Wed, 2 Nov 2005 17:50:50 +0100
From: Kurt Roeckx <email address hidden>
To: Christoph Martin <email address hidden>, <email address hidden>,
 "Package Development List for OpenSSL packages." <email address hidden>
Message-ID: <email address hidden>
References: <email address hidden> <email address hidden>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <email address hidden>
User-Agent: Mutt/1.4.2.1i
Delivered-To: <email address hidden>
Resent-Sender: Debian BTS <email address hidden>
Subject: Bug#314465: [Pkg-openssl-devel] Bug#314465: CA.pl and openssl.cnf
 default to insecure MD5 digest
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on haydn.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-2.353 required=5 tests=AWL,BAYES_00,RCVD_IN_SORBS_MISC version=3.0.3
X-Spam-Status: No, score=0.1 required=5.0 tests=FORGED_RCVD_HELO autolearn=unavailable version=3.0.4
X-BeenThere: <email address hidden>
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Kurt Roeckx <email address hidden>, <email address hidden>,
 "Package Development List for OpenSSL packages."
 <email address hidden>
List-Id: "Package Development List for OpenSSL packages." <pkg-openssl-devel.lists.alioth.debian.org>
List-Unsubscribe: <http://lists.alioth.debian.org/mailman/listinfo/pkg-openssl-devel>,
 <mailto:<email address hidden>?subject=unsubscribe>
List-Archive: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel>
List-Post: <mailto:<email address hidden>>
List-Help: <mailto:<email address hidden>?subject=help>
List-Subscribe: <http://lists.alioth.debian.org/mailman/listinfo/pkg-openssl-devel>,
 <mailto:<email address hidden>?subject=subscribe>
Sender: <email address hidden>
Errors-To: <email address hidden>
X-SA-Exim-Connect-IP: 127.0.0.1
X-OriginalArrivalTime: 02 Nov 2005 20:16:05.0528 (UTC) FILETIME=[40F84180:01C5DFEA]
X-Virus-Scanned: by amavisd-new at uni-mainz.de
X-Scanned-By: MIMEDefang 2.51 on 134.93.225.251
X-UID: 10851
X-Keywords:

On Wed, Nov 02, 2005 at 09:38:59AM +0100, Christoph Martin wrote:
> Hi Kurt,
>
> Kurt Roeckx schrieb:
> > Can this be closed now that 0.9.8 has made it to the archive?
>
> I don't think so. The bug is still present in sarge and will not be
> fixed. It should stay open until sarge is obsolete and should have a tag
> sarge and wontfix.

The proper way to do this would be to close it with the proper
version. It will still be marked as existing in sarge.

Kurt

_______________________________________________
Pkg-openssl-devel mailing list
<email address hidden>
http://lists.alioth.debian.org/mailman/listinfo/pkg-openssl-devel

--------------040409040308090800070506--

--------------enig75D9DBF46314362351D48085
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDacvzgeVih7XOVJcRAsnmAJ9tdaRZ1LKH+SIbhl5XPVn63HB0wgCgkyKE
lLFF+upgeBvJHWYGuWWI3uE=
=5BTQ
-----END PGP SIGNATURE-----

--------------enig75D9DBF46314362351D48085--