Bug 8946

Summary:	Update request: mozilla-esteid
Product:	Mageia	Reporter:	Sander Lepik <mageia>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	cmrisolde, pterjan, sysadmin-bugs, tmb
Version:	2	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	has_procedure mga2-32-ok mga2-64-ok
Source RPM:	mozilla-esteid-3.5-1.1.mga2.src.rpm	CVE:
Status comment:
Bug Depends on:	2317
Bug Blocks:

Description Sander Lepik 2013-02-02 19:01:55 CET

Proposed advisory: This update fixes import of missing certificates that are needed for Estonian ID card to function properly.

SRPM: mozilla-esteid-3.5-1.1.mga2.src.rpm

====================

How to test:
1. Install mozilla-esteid from Core Release and (re)start Firefox.
2. Open Firefox settings and follow this path: Advanced -> Encryption -> View Certificates -> Authorities.
3. Scroll down until you see "AS Sertifitseerimiskeskus".

Under this authority you should see 2 certificates.

4. Close Firefox.
5. Install mozilla-esteid from Core Updates Testing.
6. Repeat steps 2 and 3.

Now you should see two more certificates: "ESTEID-SK 2007" and "ESTEID-SK 2011".

claire robinson 2013-02-02 20:21:02 CET

Whiteboard: (none) => has_procedure

Comment 1 Samuel Verschelde 2013-02-06 15:40:02 CET

I tried it but still get only 2 certificates in firefox under "AS Sertifitseerimiskeskus" (mga2 x86_64)

Whiteboard: has_procedure => has_procedure feedback

Comment 2 Sander Lepik 2013-02-06 15:55:41 CET

Sysadmins, please nuke mozilla-esteid from updates_testing. I need to provide new version that requires certificates.

Samuel, thanks for testing!

Assignee: qa-bugs => sysadmin-bugs

Comment 3 Pascal Terjan 2013-02-09 01:29:55 CET

Done

CC: (none) => pterjan

Comment 4 Sander Lepik 2013-02-09 10:09:16 CET

Thanks, Pascal!

I have submitted new package that requires certificates. So when sysadmins are pushing this into updates they also have to link esteidcerts into updates.

Depends on: (none) => 2317
Assignee: sysadmin-bugs => qa-bugs
Whiteboard: has_procedure feedback => has_procedure

Comment 5 claire robinson 2013-02-09 10:17:55 CET

Thanks Sander. Confirmed with depcheck.

----------------------------------------
The following packages will require linking:

esteidcerts-3.5-1.mga2 (Core Release)
----------------------------------------

Comment 6 claire robinson 2013-02-09 10:26:31 CET

Testing complete mga2 32

After the update there are 5 certificates listed, confirmed it showed in the addons => extensions too.

Whiteboard: has_procedure => has_procedure mga2-32-ok

Comment 7 Carolyn Rowse 2013-02-10 10:50:25 CET

Testing 64-bit.

Carolyn

CC: (none) => isolde

Comment 8 Carolyn Rowse 2013-02-10 11:35:51 CET

After update in 64-bit, 4 certificates listed as expected, but not 5 as in 32-bit, although a different one does appear in addons => extensions.

Carolyn

Whiteboard: has_procedure mga2-32-ok => has_procedure mga2-32-ok mga2-64-OK

Carolyn Rowse 2013-02-10 11:36:24 CET

Whiteboard: has_procedure mga2-32-ok mga2-64-OK => has_procedure mga2-32-ok

Comment 9 claire robinson 2013-02-10 12:31:40 CET

Can you add the relevant whiteboard keywords please Carolyn. Also, is this then ready to be validated? If so you could you do that too please.

Thanks for testing!

Comment 10 Carolyn Rowse 2013-02-10 17:01:30 CET

Is it OK to push this one although the 32-bit and 64-bit results are slightly different?

On 64-bit, I got the following certificates in the Firefox advanced settings:

Juur-SK
EE Certification Centre Root CA
ESTEID-SK 2011
ESTEID-SK 2007

and in Addons => Extensions there is an entry "Estonian ID Card PKCS11 module loader".

Carolyn

Whiteboard: has_procedure mga2-32-ok => has_procedure mga2-32-ok feedback

Comment 11 claire robinson 2013-02-10 18:18:13 CET

Tested again i586 and it does only have 4, I must have been half asleep last time, or gained an extra finger.

Validating

Advisory
--------
This update fixes import of missing certificates that are
needed for Estonian ID card to function properly.

SRPM: mozilla-esteid-3.5-1.1.mga2.src.rpm

----------------------------------------
The following packages will require linking:

esteidcerts-3.5-1.mga2 (Core Release)
----------------------------------------

Could sysadmin please push and make the required link

Thanks!

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: has_procedure mga2-32-ok feedback => has_procedure mga2-32-ok mga2-64-ok

Comment 12 Thomas Backlund 2013-02-13 01:06:15 CET

Packages linked and update pushed:
https://wiki.mageia.org/en/Support/Advisories/MGAA-2013-0011

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED