← Back to team overview

freeipa team mailing list archive

[Bug 1858967] [NEW] RM: dogtag-pki RC buggy, not in testing or stable

 

Public bug reported:

RM: RC buggy, not in testing or stable

pki-base: Does not work with Java 11
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
Does not support TLS 1.3/Java 11
https://pagure.io/dogtagpki/issue/3088

pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

Please remove dogtag-pki and its only reverse-depends freeipa

nss now uses tls v1.2 min, and v1.3 max, potentially exposing above
issues further.

** Affects: dogtag-pki (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: freeipa (Ubuntu)
     Importance: Undecided
         Status: Confirmed


** Tags: tls1.2-min

** Also affects: freeipa (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: freeipa (Ubuntu)
       Status: New => Confirmed

** Changed in: dogtag-pki (Ubuntu)
       Status: New => Confirmed

** Description changed:

  RM: RC buggy, not in testing or stable
  
  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088
  
  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725
  
  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725
+ 
+ Please remove dogtag-pki and its only reverse-depends freeipa

** Summary changed:

- RM: RC buggy, not in testing or stable
+ RM: dogtag-pki RC buggy, not in testing or stable

** Tags added: tls1.2-min

** Description changed:

  RM: RC buggy, not in testing or stable
  
  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088
  
  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725
  
  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725
  
  Please remove dogtag-pki and its only reverse-depends freeipa
+ 
+ nss now uses tls v1.2 min, and v1.3 max, potentially exposing above
+ issues further.

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to dogtag-pki in Ubuntu.
https://bugs.launchpad.net/bugs/1858967

Title:
  RM: dogtag-pki RC buggy, not in testing or stable

Status in dogtag-pki package in Ubuntu:
  Confirmed
Status in freeipa package in Ubuntu:
  Confirmed

Bug description:
  RM: RC buggy, not in testing or stable

  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088

  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  Please remove dogtag-pki and its only reverse-depends freeipa

  nss now uses tls v1.2 min, and v1.3 max, potentially exposing above
  issues further.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/1858967/+subscriptions


Follow ups