Bug#1144745: ssl-cert: fails to upgrade 1.1.3 --> 1.2.0, likely a debconf issue

Package: ssl-cert
Version: 1.2.0
Severity: important
X-Debbugs-Cc: [email protected]

Hi,

submitting as important as I'm not sure it affects everybody
(would be Rc in case): recent upgrade of ssl-cert fails on my system

---------------------------------

# apt-get install ssl-cert
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Solving dependencies... Done
The following packages were automatically installed and are no longer required:
  bluez firebird-utils firebird3.0-common firebird3.0-common-doc firebird3.0-server-core firebird3.0-utils firebird4.0-common firebird4.0-common-doc
  firebird4.0-server-core firebird4.0-utils libboost-context1.90.0 libboost-iostreams1.83.0 libboost-thread1.55.0 libboost-thread1.83.0 libbox2d2 libcdb1
  libcdr-0.1-1 libel-api-java libfbclient2 libfreehand-0.1-1 libhsqldb1.8.0-java libib-util libiperf0 libjsp-api-java libllvm15 libllvm19 libmspub-0.1-1
  libnss-nisplus libpagemaker-0.0-0 libqxp-0.0-0 libreoffice-uiconfig-base libreoffice-uiconfig-draw libreoffice-uiconfig-impress libservlet-api-java
  libservlet3.1-java libsndio6.1 libtlsrpt0 libtokyocabinet9t64 libtomcrypt1 libtommath1 libvisio-0.1-1 libwebsocket-api-java libzmf-0.0-0 msmtp
  qml6-module-sso-onlineaccounts rpcsvc-proto
Use 'apt autoremove' to remove them.
The following packages will be upgraded:
  ssl-cert
1 upgraded, 0 newly installed, 0 to remove and 427 not upgraded.
Need to get 0 B/17.0 kB of archives.
After this operation, 3,072 B of additional disk space will be used.
Retrieving bug reports... Done
Parsing Found/Fixed information... Done
Reading changelogs... Done
Preconfiguring packages ...
(Reading database… 832841 files and directories currently installed.)
Preparing to unpack …/ssl-cert_1.2.0_all.deb…
Unpacking ssl-cert (1.2.0) over (1.1.3)…
Setting up ssl-cert (1.2.0)…
ssl-cert group already exists, skipping line
dpkg: error processing package ssl-cert (--configure):
 old ssl-cert package postinst maintainer script subprocess failed with exit status 20
Processing triggers for man-db (2.13.1-1)…
Processing triggers for runit (2.3.1-4)…
Runit triggered upgrade: setup
Runit triggered upgrade: upgrade
Processing triggers for runit-user-session (0.14.0)…
sync runit user services for ombra ..
Runit triggered upgrade: setup
Runit triggered upgrade: upgrade
.. done
Errors were encountered while processing:
 ssl-cert
======  How can you help?  (doc: https://wiki.debian.org/how-can-i-help ) ======

-----  Show old opportunities as well as new ones: how-can-i-help --old  -----
needrestart is being skipped since dpkg has failed
E: Sub-process /usr/bin/dpkg returned an error code (1)

-----------------------------

there is likely an issue with debconf or something, can't tell for sure
but I had to dowgrade to 1.1.3 (which works fine, but maybe only because it does not run
debconf on downgrade..)

if I run the postinstall it blocks and lines following 14 are not run, for example
I don't see 'make-ssl-cert' invoked below

sh -x /var/lib/dpkg/info/ssl-cert.postinst configure  1.1.3
+ set -e
+ [ configure = configure ]
+ systemd-sysusers ssl-cert.conf
ssl-cert group already exists, skipping line
+ . /usr/share/debconf/confmodule
+ _DEBCONF_IMPL=
+ [  ]
+ [ -x /usr/share/debconf/frontend ]
+ [ ! -h /usr/share/debconf/frontend ]
+ _DEBCONF_IMPL=debconf
+ [ !  ]
+ [ debconf = cdebconf ]
+ export PERL_DL_NONLAZY=1
+ exec /usr/share/debconf/frontend /var/lib/dpkg/info/ssl-cert.postinst configure 1.1.3



Best,
Lorenzo


-- System Information:
Debian Release: forky/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.17.9+deb14-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: runit (via /run/runit.stopit)

Versions of packages ssl-cert depends on:
ii  debconf [debconf-2.0]              1.5.92
ii  openssl                            3.6.3-1
ii  sysuser-helper [systemd-sysusers]  2.0.0

ssl-cert recommends no packages.

ssl-cert suggests no packages.

-- debconf information:
  make-ssl-cert/vulnerable_prng:
  make-ssl-cert/title:
  make-ssl-cert/altname:
  make-ssl-cert/hostname: localhost