freeipa team mailing list archive

[Steve Langasek <steve.langasek@xxxxxxxxxxxxx>]

Removing packages from focal:
	freeipa 4.8.3-1 in focal
		freeipa-admintools 4.8.3-1 in focal amd64
		freeipa-admintools 4.8.3-1 in focal arm64
		freeipa-admintools 4.8.3-1 in focal armhf
		freeipa-admintools 4.8.3-1 in focal ppc64el
		freeipa-admintools 4.8.3-1 in focal s390x
		freeipa-client 4.8.3-1 in focal amd64
		freeipa-client 4.8.3-1 in focal arm64
		freeipa-client 4.8.3-1 in focal armhf
		freeipa-client 4.8.3-1 in focal ppc64el
		freeipa-client 4.8.3-1 in focal s390x
		freeipa-client-samba 4.8.3-1 in focal amd64
		freeipa-client-samba 4.8.3-1 in focal arm64
		freeipa-client-samba 4.8.3-1 in focal armhf
		freeipa-client-samba 4.8.3-1 in focal ppc64el
		freeipa-client-samba 4.8.3-1 in focal s390x
		freeipa-common 4.8.3-1 in focal amd64
		freeipa-common 4.8.3-1 in focal arm64
		freeipa-common 4.8.3-1 in focal armhf
		freeipa-common 4.8.3-1 in focal i386
		freeipa-common 4.8.3-1 in focal ppc64el
		freeipa-common 4.8.3-1 in focal s390x
		freeipa-server 4.8.3-1 in focal amd64
		freeipa-server 4.8.3-1 in focal arm64
		freeipa-server 4.8.3-1 in focal armhf
		freeipa-server 4.8.3-1 in focal ppc64el
		freeipa-server 4.8.3-1 in focal s390x
		freeipa-server-dns 4.8.3-1 in focal amd64
		freeipa-server-dns 4.8.3-1 in focal arm64
		freeipa-server-dns 4.8.3-1 in focal armhf
		freeipa-server-dns 4.8.3-1 in focal i386
		freeipa-server-dns 4.8.3-1 in focal ppc64el
		freeipa-server-dns 4.8.3-1 in focal s390x
		freeipa-server-trust-ad 4.8.3-1 in focal amd64
		freeipa-server-trust-ad 4.8.3-1 in focal arm64
		freeipa-server-trust-ad 4.8.3-1 in focal armhf
		freeipa-server-trust-ad 4.8.3-1 in focal ppc64el
		freeipa-server-trust-ad 4.8.3-1 in focal s390x
		freeipa-tests 4.8.3-1 in focal amd64
		freeipa-tests 4.8.3-1 in focal arm64
		freeipa-tests 4.8.3-1 in focal armhf
		freeipa-tests 4.8.3-1 in focal i386
		freeipa-tests 4.8.3-1 in focal ppc64el
		freeipa-tests 4.8.3-1 in focal s390x
		python3-ipaclient 4.8.3-1 in focal amd64
		python3-ipaclient 4.8.3-1 in focal arm64
		python3-ipaclient 4.8.3-1 in focal armhf
		python3-ipaclient 4.8.3-1 in focal i386
		python3-ipaclient 4.8.3-1 in focal ppc64el
		python3-ipaclient 4.8.3-1 in focal s390x
		python3-ipalib 4.8.3-1 in focal amd64
		python3-ipalib 4.8.3-1 in focal arm64
		python3-ipalib 4.8.3-1 in focal armhf
		python3-ipalib 4.8.3-1 in focal i386
		python3-ipalib 4.8.3-1 in focal ppc64el
		python3-ipalib 4.8.3-1 in focal s390x
		python3-ipaserver 4.8.3-1 in focal amd64
		python3-ipaserver 4.8.3-1 in focal arm64
		python3-ipaserver 4.8.3-1 in focal armhf
		python3-ipaserver 4.8.3-1 in focal i386
		python3-ipaserver 4.8.3-1 in focal ppc64el
		python3-ipaserver 4.8.3-1 in focal s390x
		python3-ipatests 4.8.3-1 in focal amd64
		python3-ipatests 4.8.3-1 in focal arm64
		python3-ipatests 4.8.3-1 in focal armhf
		python3-ipatests 4.8.3-1 in focal i386
		python3-ipatests 4.8.3-1 in focal ppc64el
		python3-ipatests 4.8.3-1 in focal s390x
Comment: removed from testing (Debian bugs #920725, #921926), depends on broken dogtag-pki
1 package successfully removed.


** Changed in: freeipa (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1858967

Title:
  RM: dogtag-pki RC buggy, not in testing or stable

Status in dogtag-pki package in Ubuntu:
  Fix Released
Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  RM: RC buggy, not in testing or stable

  pki-base: Does not work with Java 11
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921926
  Does not support TLS 1.3/Java 11
  https://pagure.io/dogtagpki/issue/3088

  pki-base-java: Depends on openjdk-8-jre-headless which will not be in buster
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  pki-server: Dogtag stopped starting after libnss3 upgrade to 2:3.35-2
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920725

  Please remove dogtag-pki and its only reverse-depends freeipa

  nss now uses tls v1.2 min, and v1.3 max, potentially exposing above
  issues further.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/1858967/+subscriptions