GNU bug report logs - #30143
UX: print warning if substitute server is not authorized

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix; Reported by: Ricardo Wurmus <ricardo.wurmus@HIDDEN>; dated Wed, 17 Jan 2018 12:18:01 UTC; Maintainer for guix is bug-guix@HIDDEN.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 17 Jan 2018 12:17:54 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jan 17 07:17:54 2018
Received: from localhost ([127.0.0.1]:59503 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ebmfB-0005pt-Od
	for submit <at> debbugs.gnu.org; Wed, 17 Jan 2018 07:17:54 -0500
Received: from eggs.gnu.org ([208.118.235.92]:50323)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <Ricardo.Wurmus@HIDDEN>) id 1ebmf8-0005pf-PA
 for submit <at> debbugs.gnu.org; Wed, 17 Jan 2018 07:17:51 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <Ricardo.Wurmus@HIDDEN>) id 1ebmf2-0005vW-7e
 for submit <at> debbugs.gnu.org; Wed, 17 Jan 2018 07:17:45 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_40,T_DKIM_INVALID
 autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:50846)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <Ricardo.Wurmus@HIDDEN>)
 id 1ebmf2-0005vJ-4u
 for submit <at> debbugs.gnu.org; Wed, 17 Jan 2018 07:17:44 -0500
Received: from eggs.gnu.org ([2001:4830:134:3::10]:41280)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <Ricardo.Wurmus@HIDDEN>) id 1ebmf0-0004ag-TX
 for bug-guix@HIDDEN; Wed, 17 Jan 2018 07:17:43 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <Ricardo.Wurmus@HIDDEN>) id 1ebmew-0005r8-Py
 for bug-guix@HIDDEN; Wed, 17 Jan 2018 07:17:42 -0500
Received: from venus.bbbm.mdc-berlin.de ([141.80.25.30]:36380)
 by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <Ricardo.Wurmus@HIDDEN>)
 id 1ebmew-0005pz-Fj
 for bug-guix@HIDDEN; Wed, 17 Jan 2018 07:17:38 -0500
Received: from localhost (localhost [127.0.0.1])
 by venus.bbbm.mdc-berlin.de (Postfix) with ESMTP id 851FC3811A5
 for <bug-guix@HIDDEN>; Wed, 17 Jan 2018 13:17:36 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mdc-berlin.de; h=
 content-transfer-encoding:content-type:content-type:mime-version
 :message-id:date:date:subject:subject:from:from:user-agent
 :received:received:received:received; s=mdc; t=1516191456; x=
 1518005857; bh=eRQVvdJyiLwK6D0e9pjzrl+3z+ILwNeE778QbS4nZ1w=; b=l
 xHZ+FDJjIS1Q0FY+PaSY1zQeCyUinwhgG21tztLKO5IZrDlQb2+0vpRtRaucegKu
 TplEvjhB/8CqWCQAQjK2Vt6DzgnRHkw8KCrgg2oJ5luYR+rDkBN750V+8U24790R
 dIdlkaSzUxlyIsYPb8E02ZQduBC45nA1mUep+62vYg=
X-Virus-Scanned: amavisd-new at mdc-berlin.de
Received: from venus.bbbm.mdc-berlin.de ([127.0.0.1])
 by localhost (venus.bbbm.mdc-berlin.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id RUitgw96wcJ1 for <bug-guix@HIDDEN>;
 Wed, 17 Jan 2018 13:17:36 +0100 (CET)
Received: from HTCAONE.mdc-berlin.net (puck.citx.mdc-berlin.de [141.80.36.101])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by venus.bbbm.mdc-berlin.de (Postfix) with ESMTPS
 for <bug-guix@HIDDEN>; Wed, 17 Jan 2018 13:17:36 +0100 (CET)
Received: from SW-IT-P-CAS3.mdc-berlin.net (141.80.113.58) by
 HTCAONE.mdc-berlin.net (141.80.180.120) with Microsoft SMTP Server (TLS) id
 14.3.361.1; Wed, 17 Jan 2018 13:17:32 +0100
Received: from localhost (141.80.113.52) by SW-IT-P-CAS3.mdc-berlin.net
 (141.80.113.58) with Microsoft SMTP Server id 14.3.361.1; Wed, 17 Jan 2018
 13:17:29 +0100
User-agent: mu4e 0.9.18; emacs 25.3.1
From: Ricardo Wurmus <ricardo.wurmus@HIDDEN>
To: <bug-guix@HIDDEN>
Subject: UX: print warning if substitute server is not authorized
X-URL: https://elephly.net
X-PGP-Key: https://elephly.net/rekado.pubkey
X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6  2150 197A 5888 235F ACAC
Date: Wed, 17 Jan 2018 13:17:19 +0100
Message-ID: <idjpo681xyo.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
X-Originating-IP: [141.80.113.52]
X-TM-AS-Product-Ver: SMEX-11.0.0.4283-8.200.1013-23600.006
X-TM-AS-Result: No--1.901600-0.000000-31
X-TM-AS-MatchedID: 708915-704421-139705-711521-707451-847216-701516-702106-7
 00756-700454-703454-703179-703712-136070-701220-702358-148004-148133-10007-
 41000-42000-42003-63
X-TM-AS-User-Approved-Sender: Yes
X-TM-AS-User-Blocked-Sender: No
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
 [fuzzy]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -5.0 (-----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

Suppose I add example.com as a substitute server by passing
=E2=80=9C--substitute-urls=3Dhttps://example.com=E2=80=9D to the daemon o=
r the Guix
command line.  I haven=E2=80=99t authorized the signing key, so Guix won=E2=
=80=99t
accept any of the substitutes from example.com.

Currently, Guix does not make it obvious to the user that a requested
substitute server is ignored because its key is not authorized.  We
should print a clear warning in this case.

(guix scripts authenticate) already includes =E2=80=9Cvalidate-signature=E2=
=80=9D, which
aborts with an error if the key is not authorized, but we don=E2=80=99t s=
eem to
use it.

--
Ricardo




Acknowledgement sent to Ricardo Wurmus <ricardo.wurmus@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-guix@HIDDEN. Full text available.
Report forwarded to bug-guix@HIDDEN:
bug#30143; Package guix. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Wed, 17 Jan 2018 12:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.