Bug#1068388: marked as done (Allow downloading www/Debian-Edu_rootCA.crt without HTTPS redirection.)

This is a multi-part message in MIME format...

------------=_1779491342-3981863-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Fri, 22 May 2026 23:08:25 +0000
with message-id <[email protected]>
and subject line Bug#1068388: fixed in debian-edu-config 2.13.0
has caused the Debian Bug report #1068388,
regarding Allow downloading www/Debian-Edu_rootCA.crt without HTTPS redirec=
tion.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


--=20
1068388: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1068388
Debian Bug Tracking System
Contact [email protected] with problems

------------=_1779491342-3981863-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.debian.org; 4 Apr 2024 12:04:34 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
	(2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-14.9 required=4.0 tests=BAYES_00,
	BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
	DKIM_VALID_EF,FOURLA,HAS_PACKAGE,NUMERIC_HTTP_ADDR,SPF_HELO_NONE,
	SPF_PASS,XMAILER_REPORTBUG autolearn=ham autolearn_force=no
	version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 20; hammy, 123; neutral, 36; spammy,
	0. spammytokens: hammytokens:0.000-+--H*M:reportbug,
	0.000-+--H*MI:reportbug, 0.000-+--H*x:12.0.0, 0.000-+--H*UA:12.0.0,
	0.000-+--H*x:reportbug
Return-path: <[email protected]>
Received: from fregna.das-netzwerkteam.de ([2a01:4f8:202:1381::2]:52754)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1rsLpZ-003GMT-K3
	for [email protected]; Thu, 04 Apr 2024 12:04:34 +0000
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [148.251.201.105])
	by fregna.das-netzwerkteam.de (Postfix) with ESMTPS id D425E602B2
	for <[email protected]>; Thu,  4 Apr 2024 12:04:28 +0000 (UTC)
Received: from [127.0.1.1] (business-90-187-115-117.pool2.vodafone-ip.de [90.187.115.117])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTPSA id A6DAFC0D8E;
	Thu,  4 Apr 2024 14:04:28 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=das-netzwerkteam.de;
	s=dkim; t=1712232268;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=Usj+z9r1QvMr0kdRm6U9jyUplvr+ZOKzJwM1Z/lBdFc=;
	b=aL088QC5NpSZiA7a1NO4pmrokngPA6AwMZQMSzMImsEAiqvtlUW5r5DB0VvRpyGp3wOG1c
	/v9xt8akAxXDEOwy2pUqk7Ar81IR0FP2GAwOCdrtxyQRDRUEDBJNEmuuV+IBw7dN5E4I7G
	j6TikCseRPo7c7zvogKkm+FBJkWmVQ8H7dzvh325nmXLGxOeHpwWZ0a6670MIewKBSVmSP
	NOXCAc+9gaggJeb3htgHDVF1BZpG1A4yB7KMjQNDOPDxuc6LmNxP334h/HB7tT6J1wrzvt
	i2HSLKpM/7YfpGGIx5gRwt5GKOsjrgezoqdKMglBqU8WZG8Rv/nupkTVEZgGOt3xu0kUFR
	tYjzOa4eKqtC5GGJkmuHZNRsbTkTkSuSjdMKm1X4Z493h3yAHMD7rEhIepr94CX+dOwo05
	UUudMCeWA5HdTyH4kXrn5Cn46xsGc9Y20BlgHSiwjmxwgHTTjjzjVJBw5iTOOqb/mpM9N3
	EaIAoUUjbbrjObHKuus4E437GdkzWtMkdSKhH9d+ndhlNPwL1L8x6e9O3HZhDMZXMUfeZp
	FS3BfyoF8q2GG6kELBJzgXVXGnBGycwBMi8PnaP2cMnIOdwwNJ2DJ1ChLqUUtqSyZqfPho
	LRnF+EcNTyB7ODEuWt5o6o6sQ4xvcQkQT/zjiG+kgiRN10GJF+G4I=
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Daniel Teichmann <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Subject: Allow downloading www/Debian-Edu_rootCA.crt without HTTPS redirection.
Message-ID: <171223225865.1651537.3955521694604768412.reportbug@nwt-03-daniel>
X-Mailer: reportbug 12.0.0
Date: Thu, 04 Apr 2024 14:04:18 +0200
Delivered-To: [email protected]

Package: debian-edu-config
Version: 2.12.44~deb12u1
Severity: wishlist


While trying to download the CA root certificate for the Tjener, we discovered that the Apache redirects us to use HTTPS.
One could instead use `curl -k` (to ignore the HTTPS certificate) but I think it should work without HTTPS too.

Steps to reproduce:

curl http://10.0.2.2/Debian-Edu_rootCA.crt

```html
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://www/Debian-Edu_rootCA.crt">here</a>.</p>
<hr>
<address>Apache/2.4.57 (Debian) Server at 10.0.2.2 Port 80</address>
</body></html>
```

------------=_1779491342-3981863-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 1068388-close) by bugs.debian.org; 22 May 2026 23:08:28 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
	(2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,
	MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS,
	USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no
	version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 114; hammy, 150; neutral, 229; spammy,
	0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
	0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload,
	0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: <[email protected]>
Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:55500)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wQYyi-00Ghb7-2q
	for [email protected];
	Fri, 22 May 2026 23:08:28 +0000
Received: via submission
	from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP CA,CN=fasolo.debian.org,[email protected] (verified)
	by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wQYyg-006frj-38
	for [email protected];
	Fri, 22 May 2026 23:08:26 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
	Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
	:Content-Description:In-Reply-To:References;
	bh=hWgZ81tV4HyB9nONCyMQAq+utKP6+M9a8wiQKlcS01Y=; b=mBQLD9Pyi4j4wOSV48NGMSKvHi
	puasgfbSEytnt+4p/51FiMXTuta1shQ9chXvPecSTfu+NEAnGX6eaL+rsCiZt4sRLodwdg0Llhl/D
	MZD+IuX7Gz7f9+vXvQRYqMaPlW1UD4sV40/zllgHStEFbLctxOVlKyLNkMdsx2d+vmTkytUPIBLO6
	bAqSVdUdWq7Vm42t0dAVJnLPV8274LC1qD8sEDnUS+9Llx/hklpALtqP26d5nS5B7DVOYzTlUNIMW
	EpANxixKKK9LeqvHh5wjmtkYSiDuYijovDwYi22OZU1J8sFA/YYR3w4tI7BtQxrbOnILizx9kGTW/
	twGsWLZQ==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
	(envelope-from <[email protected]>)
	id 1wQYyf-00000008vn5-3Lq2;
	Fri, 22 May 2026 23:08:25 +0000
From: Debian FTP Masters <[email protected]>
Reply-To: Mike Gabriel <[email protected]>
To: [email protected]
X-DAK: dak process-upload
X-Debian: DAK
X-Debian-Package: debian-edu-config
Debian: DAK
Debian-Changes: debian-edu-config_2.13.0_source.changes
Debian-Source: debian-edu-config
Debian-Version: 2.13.0
Debian-Architecture: source
Debian-Suite: unstable
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1068388: fixed in debian-edu-config 2.13.0
Content-Type: multipart/signed; micalg="pgp-sha256";
 protocol="application/pgp-signature";
 boundary="===============5468886557356936450=="
Message-Id: <[email protected]>
Date: Fri, 22 May 2026 23:08:25 +0000

--===============5468886557356936450==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Source: debian-edu-config
Source-Version: 2.13.0
Done: Mike Gabriel <[email protected]>

We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Gabriel <[email protected]> (supplier of updated debian-edu-config pa=
ckage)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 23 May 2026 00:45:16 +0200
Source: debian-edu-config
Architecture: source
Version: 2.13.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <[email protected]>
Changed-By: Mike Gabriel <[email protected]>
Closes: 1068388 1126881
Changes:
 debian-edu-config (2.13.0) unstable; urgency=3Dmedium
 .
   [ Mike Gabriel ]
   * sbin/debian-edu-fsautoresize:
     - Avoid division by zero error on unused mountpoints.
   * sbin/debian-edu-pxeinstall:
     - Support overriding tasksel/desktop selection via mydesktop parameter in
       /etc/debian-edu/pxeinstall.conf.
     - Fix comment about mapping debconf template keywords to kernel cmdline
       keywords and drop unused variable assignment.
     - sbin/debian-edu-pxeinstall: Regression fix, only adjust desktop to
       mydesktop from pxeinstall.conf if we are processing the tasksel/desktop
       setting.
   * share/debian-edu-config/tools/copy-host-keytab:
     - Support SSH publickey login to tjener, if this is possible (e.g. if ad=
min
       is using SSH agent forwarding).
 .
   [ Daniel Teichmann ]
   * Add new file 'debian-edu-router.ldif'. Empty proxy groups should be
     installed on all new Tjeners.
   * ldap-bootstrap/debian-edu-router.ldif: Add 'server-hosts' nisNetgroup
     to 'proxy-trusted' nisNetgroup, via 'memberNisNetgroup' attribute.
   * share/debian-edu-config/gosa.conf.template: Activate nisNetgroup tab
     for user accounts.
   * apache2 debian-edu-default.conf: Do not force HTTPS on *.crt (including
     Debian-Edu_rootCA.crt).
     (Closes: #1068388)
   * etc/dovecot/local.conf: Fix passdb block syntax for Dovecot 2.4.x
     compatibility.
   * debian/control: Add 'Conflicts: firefox-esr-mobile-config'.
     (Closes: #1126881)
   * v3CA.cnf: Fix Root CA X.509v3 extensions for OpenSSL 3 compatibility.
   * v3.cnf: Fix server cert X.509v3 extensions for OpenSSL 3 compatibility.
   * tools/create-debian-edu-certs: Fix script to apply correct configuration=
s.
   * tools/create-server-cert: Add OpenSSL 3 extensions and fix base config.
Checksums-Sha1:
 0f6721f352b34e35f49d805a73add7d3e52f99b5 1978 debian-edu-config_2.13.0.dsc
 27a4b69e0987f1f3c1de9b258a5c6803b065d780 361176 debian-edu-config_2.13.0.tar=
.xz
 63ba28c466a6e71589e0986016966fccaef97849 6592 debian-edu-config_2.13.0_sourc=
e.buildinfo
Checksums-Sha256:
 e39131d48e8f06ca3b854c14d017981fa0cfa441666e9a801fb5d1a57bf45578 1978 debian=
-edu-config_2.13.0.dsc
 93b41119e529d85b645a6f8b5f95bc3edc120a3408aba8e9fe0424f6410eb953 361176 debi=
an-edu-config_2.13.0.tar.xz
 b3fe8c605debc07319f43f66e50098a22545f8c1581aa98fd281fee683b87be6 6592 debian=
-edu-config_2.13.0_source.buildinfo
Files:
 cf087b86ffd81cd64dc2f97e33fa5c01 1978 misc optional debian-edu-config_2.13.0=
.dsc
 65f80a51b61e011692c4f1ce7e97027f 361176 misc optional debian-edu-config_2.13=
.0.tar.xz
 f7f8cbddf57731c75bee1b54e03c6f73 6592 misc optional debian-edu-config_2.13.0=
_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3DtCrV
-----END PGP SIGNATURE-----


--===============5468886557356936450==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahDh6QAKCRCb9qggYcy5
Icm+AQC0XG1Ek+8OYt/DLb0BZr9qZM7dlKXVadrhBztdIat12QEAuiB1QbWSdH7S
e4vp/zH5G4I7uQFrG7Q0R3FyfMV0pQ4=
=xIKv
-----END PGP SIGNATURE-----

--===============5468886557356936450==--
------------=_1779491342-3981863-0--