Re: jessie-backports Release file expiry

Jain Johny <[email protected]> Tue, 9 Apr 2019 16:38:06 +0530
Newsgroups gmane.linux.debian.user.mirrors
Message-ID <CABX7zJ2bDmofU-4djDP+35czOMwYc+tsGgYdn2bpSnzmq4cNxg@mail.gmail.com>
Hi ftpmaster team,

Any thoughts on this?

I see that "debian-security/dists/wheezy/updates" is also archived with a
valid-until field.
Valid-Until: Wed, 10 Apr 2019 15:01:59 UTC

Jain


On Thu, Apr 4, 2019 at 5:28 PM Julien Cristau <[email protected]> wrote:

> The ftpmaster team own the archival process at the moment.
>
> I guess the attack valid-until protects against is irrelevant by the
> time a suite is archived so there's an argument to drop it, but I'll
> defer to ftpmaster on what they want to do.
>
> Cheers,
> Julien
>
> On Tue, Apr  2, 2019 at 14:39:30 +0530, Jain Johny wrote:
>
> > [email protected]
> >
> > On Mon, Apr 1, 2019 at 10:49 AM Jain Johny <[email protected]>
> wrote:
> >
> > > Hi,
> > >
> > > When this repo was archived, shouldn't it be set not to expire?
> > >
> > > $ curl -s
> http://archive.debian.org/debian/dists/jessie-backports/Release
> > > | grep Valid
> > > Valid-Until: Tue, 19 Feb 2019 20:25:43 UTC
> > >
> > > This is forcing users to use "check-valid-until=no" [1].
> > >
> > > The wheezy-backports do not have this problem.
> > >
> > > I am not sure if "check-valid-until=no" is the right way forward or
> will
> > > the repo get updated in the future to remove this expiry date. Can any
> of
> > > you please confirm?
> > >
> > > Jain.
> > >
> > > [1]
> > >
> https://unix.stackexchange.com/questions/508724/failed-to-fetch-jessie-backports-repository
> > >
>