[ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[Felix Mellmann]

Hi,

I've just encountered, that retrieving the sources of the 
host-elf-h-compat package is currently not possible:

--2021-08-15 10:35:13-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
ERROR: cannot verify bwalle.de's certificate, issued by 
'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
   Self-signed certificate encountered.
     ERROR: certificate common name 'webslave.ispgateway.de' doesn't 
match requested host name 'bwalle.de'.
To connect to bwalle.de insecurely, use `--no-check-certificate'.

The package itself was added in 2012 (commit e929e0) and got no 
essential update in between. Maybe it can be dropped nowadays since 
elf.h is part of the libc6-dev package (at least for Debian oldstable 
and newer, Ubuntu bionic and newer) which might be set as a dependency 
for ptxdist configure script.

What is you oppinion?


Best regards,

Felix


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[Roland Hieber]

(+Cc Bernhard Walle)

On Sun, Aug 15, 2021 at 10:47:14AM +0200, Felix Mellmann wrote:
> Hi,
> 
> I've just encountered, that retrieving the sources of the host-elf-h-compat
> package is currently not possible:
> 
> --2021-08-15 10:35:13-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
> Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
> Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
> ERROR: cannot verify bwalle.de's certificate, issued by
> 'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
>   Self-signed certificate encountered.
>     ERROR: certificate common name 'webslave.ispgateway.de' doesn't match
> requested host name 'bwalle.de'.
> To connect to bwalle.de insecurely, use `--no-check-certificate'.
> 
> The package itself was added in 2012 (commit e929e0) and got no essential
> update in between.

From its README:

    Q: This package is a nightmare to main[t]ain...
    A: No, because ELF is standardized and doesn't change every month.

So, yes ;-)

> Maybe it can be dropped nowadays since elf.h is part of
> the libc6-dev package (at least for Debian oldstable and newer, Ubuntu
> bionic and newer) which might be set as a dependency for ptxdist configure
> script.
> 
> What is you oppinion?

I agree. The earliest that Michael was still build-testing until
recently [1] was CentOS 7, but even that already has elf.h. When reading
the log message for commit e929e0765, it seems to me that the package
was added for the use case when PTXdist is not used on Linux – back then
there were some people who were using it on Cygwin I think – but I guess
nowadays you would just fire up an Ubuntu VM or Docker container or
something.

[1]: https://lore.ptxdist.org/ptxdist/20210805120945.GF21333@pengutronix.de

 - Roland

-- 
Roland Hieber, Pengutronix e.K.          | r.hieber@pengutronix.de     |
Steuerwalder Str. 21                     | https://www.pengutronix.de/ |
31137 Hildesheim, Germany                | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686         | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[Bernhard Walle]

Hi,


> Am 16.08.2021 um 11:06 schrieb Roland Hieber <rhi@pengutronix.de>:
> 
> (+Cc Bernhard Walle)
> 
>> On Sun, Aug 15, 2021 at 10:47:14AM +0200, Felix Mellmann wrote:
>> Hi,
>> 
>> I've just encountered, that retrieving the sources of the host-elf-h-compat
>> package is currently not possible:
>> 
>> --2021-08-15 10:35:13-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
>> Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
>> Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
>> ERROR: cannot verify bwalle.de's certificate, issued by
>> 'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
>>   Self-signed certificate encountered.
>>     ERROR: certificate common name 'webslave.ispgateway.de' doesn't match
>> requested host name 'bwalle.de'.
>> To connect to bwalle.de insecurely, use `--no-check-certificate'.
>> 
>> The package itself was added in 2012 (commit e929e0) and got no essential
>> update in between.
> 
> From its README:
> 
>    Q: This package is a nightmare to main[t]ain...
>    A: No, because ELF is standardized and doesn't change every month.
> 
> So, yes ;-)


elf-h-compat was added when I ported ptxdist to macOS. It was mainly a proof of concept that worked for some packages and some images, but I didn’t maintain it for years. 

I think we can remove it - at least no objection from my side.

But I will try to fix the certificate stuff as soon as possible - can’t promise for today.



Regards,
Bernhard

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[Bernhard Walle]

Hello again,

> Am 16.08.2021 um 11:05 schrieb Roland Hieber <rhi@pengutronix.de>:
> 
> (+Cc Bernhard Walle)
> 
> On Sun, Aug 15, 2021 at 10:47:14AM +0200, Felix Mellmann wrote:
>> Hi,
>> 
>> I've just encountered, that retrieving the sources of the host-elf-h-compat
>> package is currently not possible:
>> 
>> --2021-08-15 10:35:13-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
>> Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
>> Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
>> ERROR: cannot verify bwalle.de's certificate, issued by
>> 'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
>>   Self-signed certificate encountered.
>>     ERROR: certificate common name 'webslave.ispgateway.de' doesn't match
>> requested host name 'bwalle.de'.
>> To connect to bwalle.de insecurely, use `--no-check-certificate'.

why is the download https? Looking in the package rule, there’s http and there’s no redirection:


[bwalle@curie ~] wget http://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
--2021-08-16 21:12:56--  http://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
Resolving bwalle.de (bwalle.de)... 2a00:1158:5:491::, 92.204.55.145
Connecting to bwalle.de (bwalle.de)|2a00:1158:5:491::|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 79081 (77K) [application/x-bzip2]
Saving to: 'elf-h-compat-0.2.tar.bz2.1'

elf-h-compat-0.2.tar.bz2.1    100%[=================================================>]  77.23K  --.-KB/s    in 0.04s   

2021-08-16 21:12:56 (1.96 MB/s) - 'elf-h-compat-0.2.tar.bz2.1' saved [79081/79081]




Regards,
Bernhard



_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] host-elf-h-compat: Upstream server seems to be unstable

[Felix Mellmann]

Hi Bernhard,

today I've encountered the same HTTPS issue as described the other day. 
But now I know the reason - wget seemed to have stored your HSTS 
settings in ~/.wget-hsts and automatically switched to HTTPS:

--------------------------------
target: elf-h-compat-0.2.tar.bz2
--------------------------------

URL transformed to HTTPS due to an HSTS policy
--2021-09-01 10:08:54-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
ERROR: cannot verify bwalle.de's certificate, issued by 
'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
   Self-signed certificate encountered.
     ERROR: certificate common name 'webslave.ispgateway.de' doesn't 
match requested host name 'bwalle.de'.
To connect to bwalle.de insecurely, use `--no-check-certificate'.

After removing the HSTS entry from ~/.wget-hsts the download succeeded 
and the HSTS entry did not appear again.

Best regards,

Felix


On 16.08.21 21:13, Bernhard Walle wrote:
> Hello again,
>
>> Am 16.08.2021 um 11:05 schrieb Roland Hieber <rhi@pengutronix.de>:
>>
>> (+Cc Bernhard Walle)
>>
>> On Sun, Aug 15, 2021 at 10:47:14AM +0200, Felix Mellmann wrote:
>>> Hi,
>>>
>>> I've just encountered, that retrieving the sources of the host-elf-h-compat
>>> package is currently not possible:
>>>
>>> --2021-08-15 10:35:13-- https://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
>>> Resolving bwalle.de (bwalle.de)... 92.204.55.145, 2a00:1158:5:491::
>>> Connecting to bwalle.de (bwalle.de)|92.204.55.145|:443... connected.
>>> ERROR: cannot verify bwalle.de's certificate, issued by
>>> 'CN=webslave.ispgateway.de,O=ispgateway,L=Ismaing,ST=Bavaria,C=DE':
>>>    Self-signed certificate encountered.
>>>      ERROR: certificate common name 'webslave.ispgateway.de' doesn't match
>>> requested host name 'bwalle.de'.
>>> To connect to bwalle.de insecurely, use `--no-check-certificate'.
> why is the download https? Looking in the package rule, there’s http and there’s no redirection:
>
>
> [bwalle@curie ~] wget http://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
> --2021-08-16 21:12:56--  http://bwalle.de/programme/elf-h-compat-0.2.tar.bz2
> Resolving bwalle.de (bwalle.de)... 2a00:1158:5:491::, 92.204.55.145
> Connecting to bwalle.de (bwalle.de)|2a00:1158:5:491::|:80... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 79081 (77K) [application/x-bzip2]
> Saving to: 'elf-h-compat-0.2.tar.bz2.1'
>
> elf-h-compat-0.2.tar.bz2.1    100%[=================================================>]  77.23K  --.-KB/s    in 0.04s
>
> 2021-08-16 21:12:56 (1.96 MB/s) - 'elf-h-compat-0.2.tar.bz2.1' saved [79081/79081]
>
>
>
>
> Regards,
> Bernhard
>
>
>
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de