Bug 39922 - UCRV proxy/http does not work with https repository access
UCRV proxy/http does not work with https repository access
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Update - univention-updater
UCS 4.1
Other Linux
: P5 normal (vote)
: UCS 4.1
Assigned To: Sönke Schwardt-Krummrich
Janek Walkenhorst
: interim-3
Depends on:
Blocks: 39943 55561
  Show dependency treegraph
 
Reported: 2015-11-12 19:16 CET by Janek Walkenhorst
Modified: 2023-01-11 21:02 CET (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Janek Walkenhorst univentionstaff 2015-11-12 19:16:13 CET
If a proxy/http is configured and must be used for web access apt-get fails

 Err https://updates-test.software-univention.de 4.1-0/amd64/ Packages
   Failed to connect to 0.0.7.209: Network is unreachable

and so does univention-updater

 The connection to the repository server failed: Configuration error:
 Network is unreachable.
 Please check the repository configuration and the network connection.

Changing to http repository access fixes it

 ucr set repository/online/server='http://updates-test.software-univention.de'
Comment 1 Sönke Schwardt-Krummrich univentionstaff 2015-11-12 22:47:15 CET
Introduced proxy/https in univention-updater and univention-base-files.

univention-updater, /etc/profiles and /etc/apt/apt.conf.d/80proxy now use proxy/https if it is set. If proxy/https is not set, the value of proxy/http is used as fallback.

univention-base-files (5.0.0-9):
r65465 | Bug #39922: set apt's proxy settings for HTTPS connections / set https_proxy in /etc/profile if proxy/https is defined

univention-updater (11.0.6-1):
r65464 | Bug #39922: introduced proxy/https for proxying HTTPS connections - use proxy/http as fallback if proxy/https is unset

changelog-4.1-0.xml:
r65466 | Bug #39922: added changelog entry for proxy/https in updater and proxy/* in apt.conf
Comment 2 Stefan Gohmann univentionstaff 2015-11-13 05:53:55 CET
See http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-0/job/Autotest%20MultiEnv/SambaVersion=s3,Systemrolle=slave/102/testReport/junit/00_checks/99check_log_files/test/
---------------------------------------------------------------------------
bound to 10.210.247.8 -- renewal in 1665 seconds.
Generating locales (this might take a while)...
  en_US.UTF-8... done
  de_DE.UTF-8... done
Generation complete.
/etc/console/boottime.kmap.gz does not exist.
  File "<stdin>", line 10
    if not configRegistry.get('proxy/https'):
    ^
IndentationError: unexpected indent
File: /etc/modules
---------------------------------------------------------------------------

And http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-0/job/Autotest%20MultiEnv/SambaVersion=s3,Systemrolle=slave/102/testReport/junit/09_updater/19proxy-no_proxy/test/
---------------------------------------------------------------------------
(2015-11-12 18:50:50.542619)6753 blocks
(2015-11-12 18:50:50.545061)gpg: keyring `/root/.gnupg/secring.gpg' created
(2015-11-12 18:50:50.545205)gpg: keyring `/root/.gnupg/pubring.gpg' created
[2015-11-12 18:50:50.718663]OK
[2015-11-12 18:50:50.787616]Stopping periodic command scheduler: cron.
(2015-11-12 18:50:52.245340)W: Fehlschlag beim Holen von http://localhost/univention-repository/4.1/maintained/4.1-0/amd64/Release.gpg  Verbindung mit localhost:9 nicht möglich (127.0.0.1) - connect (111: Verbindungsaufbau abgelehnt) [IP: 127.0.0.1 9]
(2015-11-12 18:50:52.245374)W: Einige Indexdateien konnten nicht heruntergeladen werden. Sie wurden ignoriert oder alte an ihrer Stelle benutzt.
(2015-11-12 18:50:52.261896)E: Paket test-19361-2002 kann nicht gefunden werden.
(2015-11-12 18:50:52.262337)**************** Test failed above this line ****************
(2015-11-12 18:50:52.262355)ERROR 19proxy-no_proxy:36 0
(2015-11-12 18:50:52.262366)ERROR apt-get -qq install "${pkgname}"
[2015-11-12 18:50:57.776636]=== RESULT: 110 ===
---------------------------------------------------------------------------
Comment 3 Stefan Gohmann univentionstaff 2015-11-13 06:14:37 CET
(In reply to Stefan Gohmann from comment #2)
> See
> http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-0/job/
> Autotest%20MultiEnv/SambaVersion=s3,Systemrolle=slave/102/testReport/junit/
> 00_checks/99check_log_files/test/
> ---------------------------------------------------------------------------
> bound to 10.210.247.8 -- renewal in 1665 seconds.
> Generating locales (this might take a while)...
>   en_US.UTF-8... done
>   de_DE.UTF-8... done
> Generation complete.
> /etc/console/boottime.kmap.gz does not exist.
>   File "<stdin>", line 10
>     if not configRegistry.get('proxy/https'):
>     ^
> IndentationError: unexpected indent
> File: /etc/modules
> ---------------------------------------------------------------------------

Fixed with r65470:
 * etc/profile: fixed indentation error (Bug #39922)
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2015-11-13 11:10:57 CET
(In reply to Stefan Gohmann from comment #3)
> Fixed with r65470:
>  * etc/profile: fixed indentation error (Bug #39922)
→ OK

(In reply to Stefan Gohmann from comment #2)

> (2015-11-12 18:50:52.262355)ERROR 19proxy-no_proxy:36 0
> (2015-11-12 18:50:52.262366)ERROR apt-get -qq install "${pkgname}"
> [2015-11-12 18:50:57.776636]=== RESULT: 110 ===

Another jenkins run with updated packages (incl. r65470) had no problems with this test.
Comment 5 Janek Walkenhorst univentionstaff 2015-11-13 15:56:20 CET
u-updater, IPv4 proxy, HTTP repository: OK
u-updater, IPv6 proxy, HTTP repository: OK
apt-get u, IPv4 proxy, HTTP repository: OK
apt-get u, IPv6 proxy, HTTP repository: FAIL
u-updater, IPv4 proxy, HTTPS repository: OK
u-updater, IPv6 proxy, HTTPS repository: OK
apt-get u, IPv4 proxy, HTTPS repository: OK
apt-get u, IPv6 proxy, HTTPS repository: FAIL

It seems apt-get dislikes a IPv6 proxy in general. Otherwise it is ok.

Changelog: OK
Code review: OK

Reopen: Can apt-get update + IPv6 proxy be made to work with correct configuration or is it a more general problem?
Comment 6 Janek Walkenhorst univentionstaff 2015-11-13 16:03:30 CET
(In reply to Janek Walkenhorst from comment #5)
> Reopen: Can apt-get update + IPv6 proxy be made to work with correct
> configuration or is it a more general problem?Bug #39943
Comment 7 Janek Walkenhorst univentionstaff 2015-11-13 16:03:57 CET
(In reply to Janek Walkenhorst from comment #5)
> u-updater, IPv4 proxy, HTTP repository: OK
> u-updater, IPv6 proxy, HTTP repository: OK
> apt-get u, IPv4 proxy, HTTP repository: OK
> apt-get u, IPv6 proxy, HTTP repository: FAIL
> u-updater, IPv4 proxy, HTTPS repository: OK
> u-updater, IPv6 proxy, HTTPS repository: OK
> apt-get u, IPv4 proxy, HTTPS repository: OK
> apt-get u, IPv6 proxy, HTTPS repository: FAIL
> 
> It seems apt-get dislikes a IPv6 proxy in general. Otherwise it is ok.
> 
> Changelog: OK
> Code review: OK
Comment 8 Stefan Gohmann univentionstaff 2015-11-17 12:12:14 CET
UCS 4.1 has been released:
 https://docs.software-univention.de/release-notes-4.1-0-en.html
 https://docs.software-univention.de/release-notes-4.1-0-de.html

If this error occurs again, please use "Clone This Bug".