Package: src:golang-github-notaryproject-notation-go
Version: 1.2.1-3
Severity: serious
Tags: ftbfs trixie sid

Dear maintainer:

During a rebuild of all packages in unstable, your package failed to build:

--------------------------------------------------------------------------------
[...]
debian/rules clean
dh clean --builddirectory=_build --buildsystem=golang
dh_auto_clean -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf_clean -O--builddirectory=_build -O--buildsystem=golang
dh_clean -O--builddirectory=_build -O--buildsystem=golang
debian/rules binary
dh binary --builddirectory=_build --buildsystem=golang
dh_update_autotools_config -O--builddirectory=_build -O--buildsystem=golang
dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
cd _build && go install -trimpath -v -p 2 github.com/notary [too-long-redacted] notation-go/verifier/truststore
internal/goarch
internal/unsafeheader

[... snipped ...]

=== RUN TestSignWithTimestamping/envelopeType=application/cose_keySpec=EC-384
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
=== RUN TestSignWithTimestamping/envelopeType=application/cose_keySpec=EC-521
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-2048
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-3072
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-4096
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=EC-256
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=EC-384
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
=== RUN TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=EC-521
signer_test.go:405: Sign() error = timestamp: POST "http://timestamp.digicert.com": https response bad status: 500 Internal Server Error
--- FAIL: TestSignWithTimestamping (1.73s)
--- PASS: TestSignWithTimestamping/envelopeType=application/cose_keySpec=RSA-2048 (0.27s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/cose_keySpec=RSA-3072 (0.13s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/cose_keySpec=RSA-4096 (0.13s)
--- PASS: TestSignWithTimestamping/envelopeType=application/cose_keySpec=EC-256 (0.14s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/cose_keySpec=EC-384 (0.13s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/cose_keySpec=EC-521 (0.13s)
--- PASS: TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-2048 (0.14s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-3072 (0.13s)
--- FAIL: TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=RSA-4096 (0.13s)
--- PASS: TestSignWithTimestamping/envelopeType=application/jose+json_keySpec=EC-256 (0.14s)
--- FAIL: Test

Processing control commands:

severity -1 normal

Bug #1104509 [src:golang-github-notaryproject-notation-go] golang-github-notaryproject-notation-go: FTBFS: Tries to access Internet during build
Severity set to 'normal' from 'serious'

--
1104509: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104509
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Processing commands for control@bugs.debian.org:

severity 1104509 serious

Bug #1104509 [src:golang-github-notaryproject-notation-go] golang-github-notaryproject-notation-go: FTBFS: Tries to access Internet during build
Severity set to 'serious' from 'normal'

thanks

Stopping processing here.

Please contact me if you need assistance.
--
1104509: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104509
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

El 3/5/25 a las 17:05, Pirate Praveen escribió:

The machine where I built it did not have any internet connection. I turned off all internet connections during the build (wifi and usb tethering was turned off). The build was successful without any internet connection available during build.

I trust that what you say is true, but I reiterate that this
is not a FTBFS bug, but a violation of Debian Policy which is
also considered RC.

Policy does not just say "packages must build ok when internet
is not available", it says "packages must not even *attempt*
to access Internet".

Thanks.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

El 3/5/25 a las 17:14, Pirate Praveen escribió:

    signer_test.go:403: Failed to connect to external host: timestamp: Post "http://timestamp.digicert.com": dial tcp: lookup timestamp.digicert.com on 127.0.0.53:53: server misbehaving

Note that there is an implicit DNS query there.

This is what policy says:

Except for packages in the non-free archive with the Autobuild control field unset or set to no,
required targets must not attempt network access, except, via the loopback interface,
to services on the build host that have been started by the build.

DNS queries are considered network access.

Thanks.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Processing commands for control@bugs.debian.org:

retitle 1104509 golang-github-notaryproject-notation-go: Tries to access Internet during build

Bug #1104509 [src:golang-github-notaryproject-notation-go] golang-github-notaryproject-notation-go: FTBFS: Tries to access Internet during build
Changed Bug title to 'golang-github-notaryproject-notation-go: Tries to access Internet during build' from 'golang-github-notaryproject-notation-go: FTBFS: Tries to access Internet during build'.

thanks

Stopping processing here.

Please contact me if you need assistance.
--
1104509: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104509
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

This is a multi-part message in MIME format.
tags 1104509 patch
thanks

Hi. Proposed patch, to be imported with quilt.

Maybe some of the other patches could be simplified after this.

Thanks. LS0tIGEvc2lnbmVyL3NpZ25lcl90ZXN0LmdvCisrKyBiL3NpZ25lci9zaWduZXJfdGVzdC5n bwpAQCAtMjIwLDYgKzIyMCw3IEBACiB9CiAKIGZ1bmMgVGVzdFNpZ25XaXRoVGltZXN0YW1w aW5nKHQgKnRlc3RpbmcuVCkgewordC5Ta2lwKCJEaXNhYmxlZCBiZWNhdXNlIGl0IHRyaWVz IHRvIGFjY2VzcyB0aGUgbmV0d29yayIpCiAJLy8gc2lnbiB3aXRoIGtleQogCWZvciBfLCBl bnZlbG9wZVR5cGUgOj0gcmFuZ2Ugc2lnbmF0dXJlLlJlZ2lzdGVyZWRFbnZlbG9wZVR5cGVz KCkgewogCQlmb3IgXywga2V5Q2VydCA6PSByYW5nZSBrZXlDZXJ0UGFpckNvbGxlY3Rpb25z
IHsK

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Control: tag -1 pending

Hello,

Bug #1104509 in golang-github-notaryproject-notation-go reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/go-team/packages/golang-github-notaryproject-notation-go/-/commit/27ac8a16efc9c1ac90b623b950650550e3bbdafc

------------------------------------------------------------------------ Disable network tests. Closes: #1104509. ------------------------------------------------------------------------

(this message was generated automatically)
--
Greetings

https://bugs.debian.org/1104509

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Processing control commands:

tag -1 pending

Bug #1104509 [src:golang-github-notaryproject-notation-go] golang-github-notaryproject-notation-go: Tries to access Internet during build
Added tag(s) pending.

--
1104509: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104509
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

This is a multi-part message in MIME format...

Your message dated Wed, 14 May 2025 20:49:35 +0000
with message-id <E1uFJ2l-00GwTy-AT@fasolo.debian.org>
and subject line Bug#1104509: fixed in golang-github-notaryproject-notation-go 1.2.1-4
has caused the Debian Bug report #1104509,
regarding golang-github-notaryproject-notation-go: Tries to access Internet during build
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


--
1104509: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104509
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

Received: (at submit) by bugs.debian.org; 1 May 2025 11:24:36 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
(2021-04-09) on buxtehude.debian.org
X-Spam-Level:
X-Spam-Status: No, score=-120.6 required=4.0 tests=BAYES_00,
BODY_INCLUDES_PACKAGE,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FROMDEVELOPER,FVGT_m_MULTI_ODD,
HAS_PACKAGE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_NONE,
USER_IN_DKIM_WELCOMELIST,USER_IN_DKIM_WHITELIST,X_DEBBUGS_CC
autolearn=ham autolearn_force=no
version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 18; hammy, 150; neutral, 205; spammy,
0. spammytokens: hammytokens:0.000-+--trixie, 0.000-+--sk:dh_auto,
0.000-+--H*F:U*sanvila, 0.000-+--H*rp:U*sanvila, 0.000-+--sk:golang Return-path: <sanvila@debian.org>
Received: from mitropoulos.debian.org