Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596292 - app-misc/ca-certificates-20160104.3.27.1 creates CONFIG_PROTECTED symlinks which can't be updated / dispatch-conf can't handle unicode filenames
Summary: app-misc/ca-certificates-20160104.3.27.1 creates CONFIG_PROTECTED symlinks wh...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo/Alt
Classification: Unclassified
Component: Prefix Support (show other bugs)
Hardware: AMD64 OS X
: Normal normal (vote)
Assignee: Gentoo Prefix
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-05 22:15 UTC by Stuart Shelton
Modified: 2021-01-06 13:11 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stuart Shelton 2016-10-05 22:15:38 UTC
(After having removed the problematic certificates to see whether that would solve the problem:)

> >>> Original instance of package unmerged safely.
>  * Removing the following broken symlinks:
>  * /opt/gentoo//etc/ssl/certs/592c0a9a.0 -> TURKTRUST_Certificate_Services_Provider_Root_2007.pem
>  * /opt/gentoo//etc/ssl/certs/65b876bd.0 -> TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem
>  * /opt/gentoo//etc/ssl/certs/7992b8bb.0 -> TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.pem
>  * /opt/gentoo//etc/ssl/certs/c679bc3f.0 -> TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H6.pem
> >>> app-misc/ca-certificates-20160104.3.27.1 merged.
> 
>  * Messages for package app-misc/ca-certificates-20160104.3.27.1:
> 
>  * Removing the following broken symlinks:
>  * /opt/gentoo//etc/ssl/certs/592c0a9a.0 -> TURKTRUST_Certificate_Services_Provider_Root_2007.pem
>  * /opt/gentoo//etc/ssl/certs/65b876bd.0 -> TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem
>  * /opt/gentoo//etc/ssl/certs/7992b8bb.0 -> TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.pem
>  * /opt/gentoo//etc/ssl/certs/c679bc3f.0 -> TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H6.pem
> >>> Auto-cleaning packages...
> 
> >>> No outdated packages were found on your system.
> 
>  * GNU info directory index is up-to-date.
> 
>  * IMPORTANT: 4 config files in '/opt/gentoo/etc' need updating.
>  * See the CONFIGURATION FILES and CONFIGURATION FILES UPDATE TOOLS
>  * sections of the emerge man page to learn how to update config files.
> portage@macpro /opt/gentoo/etc/ssl/certs $ dispatch-conf
> 
> --- /tmp/tmp9R2GOX/0    2016-10-05 22:58:14.000000000 +0100
> +++ /tmp/tmp9R2GOX/1    2016-10-05 22:58:14.000000000 +0100
> @@ -1 +1 @@
> -/dev/null
> +SYM: /opt/gentoo/etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_2007.pem -> ../../../../../opt/gentoo/usr/share/ca-certificates/mozilla/TURKTRUST_Certificate_Services_Provider_Root_2007.crt
> 
> >> (1 of 4) -- /opt/gentoo/etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_2007.pem
> >> q quit, h help, n next, e edit-new, z zap-new, u use-new
>    m merge, t toggle-merge, l look-merge: u
> 
> --- /tmp/tmpot1uNo/0    2016-10-05 22:58:18.000000000 +0100
> +++ /tmp/tmpot1uNo/1    2016-10-05 22:58:18.000000000 +0100
> @@ -1 +1 @@
> -/dev/null
> +SYM: /opt/gentoo/etc/ssl/certs/TU<CC><88>BI<CC><87>TAK_UEKAE_Ko<CC><88>k_Sertifika_Hizmet_Sag<CC><86>lay<C4><B1>c<C4><B1>s<C4><B1>_-_Su<CC><88>ru<CC><88>m_3.pem -> ../../../../../opt/gentoo/usr/share/ca-certificates/mozilla/TU<CC><88>BI<CC><87>TAK_UEKAE_Ko<CC><88>k_Sertifika_Hizmet_Sag<CC><86>lay<C4><B1>c<C4><B1>s<C4><B1>_-_Su<CC><88>ru<CC><88>m_3.crt
> 
> Traceback (most recent call last):
>   File "/opt/gentoo/usr/lib/python-exec/python2.7/dispatch-conf", line 513, in <module>
>     portage.settings.get('CONFIG_PROTECT', '')))
>   File "/opt/gentoo/usr/lib/python-exec/python2.7/dispatch-conf", line 291, in grind
>     print('>> (%i of %i) -- %s' % (count, len(confs), conf ['current']))
> UnicodeEncodeError: 'ascii' codec can't encode character u'\u0308' in position 43: ordinal not in range(128)

... although these files can be merged by 'etc-update'.

Also note the following handling of these files:

> $ /opt/gentoo/bin/ls -1 TU*
> TURKTRUST_Certificate_Services_Provider_Root_2007.pem
> 'TU'$'\314\210''BI'$'\314\207''TAK_UEKAE_Ko'$'\314\210''k_Sertifika_Hizmet_Sag'$'\314\206''lay'$'\304\261''c'$'\304\261''s'$'\304\261''_-_Su'$'\314\210''ru'$'\314\210''m_3.pem'
> 'TU'$'\314\210''RKTRUST_Elektronik_Sertifika_Hizmet_Sag'$'\314\206''lay'$'\304\261''c'$'\304\261''s'$'\304\261''_H5.pem'
> 'TU'$'\314\210''RKTRUST_Elektronik_Sertifika_Hizmet_Sag'$'\314\206''lay'$'\304\261''c'$'\304\261''s'$'\304\261''_H6.pem'
> 
> $ /bin/ls -1 TU*
> TURKTRUST_Certificate_Services_Provider_Root_2007.pem
> TU??BI??TAK_UEKAE_Ko??k_Sertifika_Hizmet_Sag??lay??c??s??_-_Su??ru??m_3.pem
> TU??RKTRUST_Elektronik_Sertifika_Hizmet_Sag??lay??c??s??_H5.pem
> TU??RKTRUST_Elektronik_Sertifika_Hizmet_Sag??lay??c??s??_H6.pem
> 
> $ cat T<tab>
> T-TeleSec_GlobalRoot_Class_2.pem                                             TÜBİTAK_UEKAE_Kök_Sertifika_Hizmet_Sağlayıcısı_-_Sürüm_3.pem  TWCA_Root_Certification_Authority.pem
> T-TeleSec_GlobalRoot_Class_3.pem                                             TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.pem              Taiwan_GRCA.pem
> TC_TrustCenter_Class_3_CA_II.pem                                             TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H6.pem              TeliaSonera_Root_CA_v1.pem
> TURKTRUST_Certificate_Services_Provider_Root_2007.pem                        TWCA_Global_Root_CA.pem                                                      Trustis_FPS_Root_CA.pem

(... noting that in the last case, bash is displaying the characters correctly but then getting their widths wrong, throwing off the spacing)
Comment 1 Fabian Groffen gentoo-dev 2021-01-06 13:11:58 UTC
this is fixed in recent versions