Tails

#2 Updated by sajolida 2016-01-26 18:25:48

• Target version changed from Tails_2.0 to Tails_2.2

Postponing: let’s debug things a bit more before doing this.

#7 Updated by sajolida 2016-01-29 18:18:14

• Parent task deleted (Feature #8592)

#8 Updated by sajolida 2016-03-15 15:03:55

• Target version deleted (Tails_2.2)

#9 Updated by sajolida 2016-04-01 10:38:18

• blocks #8538 added

#10 Updated by sajolida 2016-04-01 11:15:44

• blocks Bug #11300: Have stable version of DAVE out of development channel added

#13 Updated by ma1 2016-07-19 09:19:23

• % Done changed from 0 to 100
• QA Check set to Ready for QA

https://git-tails.immerda.ch/ma1/download-and-verify-extension/commit/?id=892e919c0c8f9a509d5ae44afeaa53eff8972b3c
and
https://git-tails.immerda.ch/ma1/download-and-verify-extension/commit/?id=75806950cf596b416836344f83e193cbaf7a5f3d

#14 Updated by intrigeri 2016-07-19 09:57:22

• Assignee changed from ma1 to sajolida
• Target version set to Tails_2.5

sajolida, I assume you’ll review this. Please reassign to me once it’s done, if you don’t mind: IIRC I was the one who complained about this initially, so I’d like to have a quick look before we call it done :)

#15 Updated by intrigeri 2016-08-02 09:31:57

• Target version changed from Tails_2.5 to Tails_2.6

#16 Updated by sajolida 2016-09-13 05:04:14

• Target version deleted (Tails_2.6)

#17 Updated by sajolida 2016-11-06 19:16:48

• Assignee changed from sajolida to intrigeri

• maone.net is gone.
• Let’s Encrypt has been added.
• *.boum.org is still here.
• What do we need labs.riseup.net for?

Happy if intrigeri has a look, otherwise I’ll send this to Giorgio for the next release (with no hurry).

#18 Updated by intrigeri 2016-11-09 09:48:17

• Status changed from Confirmed to In Progress
• Target version set to Tails_2.7
• % Done changed from 100 to 50

#19 Updated by intrigeri 2016-11-09 09:57:29

• Assignee changed from intrigeri to ma1
• % Done changed from 50 to 60
• QA Check changed from Ready for QA to Info Needed

intrigeri wrote:
> While we’re at it, it would be good to remove the (outdated) fingerprint for boum.org’s certificate from the config file. It’s a bit misleading to anyone without deeper knowledge of the config file format, such as me… until I understood that this data was not used due to cert: null. Let’s make life easier for auditors :)

I’ve looked at this and it looks good, as far as removing dependencies to maone.net is concerned.

My only remaining question is: is there a reason why conf.json still has

      "*.boum.org": {
        "subjectName":"CN=*.boum.org,OU=Gandi Standard Wildcard SSL,OU=Domain Control Validated",
        "issuerOrganization":"Gandi",
        "sha256Fingerprint":"FB:89:1F:85:61:8D:6F:62:EA:A6:6E:92:4D:3A:FC:80:17:03:D6:FB:D5:F4:B0:31:E7:D7:5A:7F:55:06:74:2D",
        "serialNumber":"00:84:A7:E7:40:C4:D4:54:54:64:E4:35:22:38:F0:29:53"
      },

?

It’s unused (and quite possibly has obsolete hashes), right?

#20 Updated by intrigeri 2016-11-09 17:37:00

• Target version changed from Tails_2.7 to Tails_2.9.1
• QA Check changed from Info Needed to Dev Needed

> * *.boum.org is still here.

Right, commented about it earlier today.

> * What do we need labs.riseup.net for?

It is useful for testing until https://tails.boum.org/ switches to Let’s Encrypt (mid-December). I think we’re in the exact same situation as I was arguing about in Feature #10859#note-4, i.e. dev-time stuff landing into the production configuration. So let’s please remove that entry.

(Yes, I understand that in theory, such entries are harmless, as we’re doing a hostname → cert/issuer mapping, and as long as we’re not pointing DAVE to a URL hosted on labs.riseup.net, this entry is completely a no-op; but still, it does make security auditing needlessly harder.)

> Happy if intrigeri has a look, otherwise I’ll send this to Giorgio for the next release (with no hurry).

Yes, we made our major deadline (thanks Giorgio) and this doesn’t need to be addressed in a hurry. Giorgio, can handle it by mid-December?

(Worst case, we will use it as a way to test our shiny new credentials that supposedly allow us to release DAVE ourselves :)

#21 Updated by ma1 2016-11-09 18:25:39

• Assignee changed from ma1 to intrigeri
• QA Check changed from Dev Needed to Ready for QA

I had left them because JSON does not support comments but I wanted to 1) help testing 2) showcasing the pinner capabilities beyond the current configuration.
In last commit the “dirty” data in conf.json has gone in a new “conf.json.sample” file, which is ignored by the build script.
Does it look OK now?

#22 Updated by intrigeri 2016-11-09 19:29:14

• Assignee changed from intrigeri to ma1
• QA Check changed from Ready for QA to Dev Needed

> In last commit the “dirty” data in conf.json has gone in a new “conf.json.sample” file, which is ignored by the build script.
> Does it look OK now?

Yes!

But that last commit brings in lots of unrelated changes, including some that IMO we don’t want in Git (if you don’t know about git add -p, give it a try: you’ll love it, and reviewers of code bases you work on will too!); so I’ll go off-topic here, just as much as that commit did. Possibly unwanted changes:

• addition of bootstrap.js and install.rdf: was this intended? If yes, then I guess that HACKING needs to be updated accordingly;
• addition of lib/mirror-dispatcher.js: do we really want to embed a copy of this library here? I could live with that if you prefer it this way, but then each import should be made in an atomic commit, that makes it clear which exact commit of the upstream mirror-dispatcher Git repo was used when importing, otherwise it’ll be unclear what state the embedded code copy is at, and it would increase the chances that someone mistakenly starts hacking on that file in the wrong place.

Also, BTW, it’s not news but I don’t understand why we are tracking a build product (www/dave.xpi) inside the very Git repo it’s built from.

If these issues can all easily be handled right now, fine! Otherwise just let me know, and then I’ll file a separate ticket about them, so that we don’t get confused by discussing them on this (unrelated) ticket.

#23 Updated by sajolida 2016-11-10 16:32:02

• blocked by deleted (Bug #11300: Have stable version of DAVE out of development channel)

#24 Updated by anonym 2016-12-14 20:11:21

• Target version changed from Tails_2.9.1 to Tails 2.10

#25 Updated by anonym 2017-01-24 20:48:49

• Target version changed from Tails 2.10 to Tails_2.11

#26 Updated by intrigeri 2017-03-03 08:08:34

• Target version changed from Tails_2.11 to Tails_2.12

Hi Giorgio! Can you please take a look at my comment from early November? For now I mainly want to agree on a set of tasks to do so I can create the corresponding tickets, and then we can share the work among whoever feels responsible.

#27 Updated by intrigeri 2017-04-20 06:53:49

• Target version changed from Tails_2.12 to Tails_3.0

#30 Updated by sajolida 2017-05-29 16:35:51

• Private changed from No to Yes

I’ve seen it but thought it was no really urgent.

#32 Updated by sajolida 2017-06-02 17:15:10

• Private changed from Yes to No

Oops, putting this ticket “Public” again so ma1 can see it :)

#33 Updated by intrigeri 2017-06-10 18:03:36

• Target version changed from Tails_3.0 to Tails_3.1

I’m not counting on this being fixed in the next 3 days, so postponing. sajolida: I’ll leave it to you to manage your contractor wrt. expectations and deadlines, but given the remaining issues are technical ones that I raised, I’m happy to take care of the code review :) And if this remains unaddressed for too long, IMO reassign to our new DAVE maintainer, and draw whatever conclusions are needed (I’d rather see this fixed by anyone soonish than seeing it open for 6+ more month, given what remains to do is trivial cleanup).

#37 Updated by ma1 2017-07-03 22:25:02

• QA Check changed from Dev Needed to Info Needed

Finally I could get to this, sorry for having dragged it so far.
May I have a recap of the issues left to be addressed yet? Are those from comment #22 only (yes, I probably just messed up the final, hurried commit with unneeded files)?
What’s currently the most up-to-date or otherwise useful repository to work on?
Thank you!

#38 Updated by intrigeri 2017-07-04 08:18:54

• QA Check changed from Info Needed to Dev Needed

Thanks Giorgio for coming back to this :)

> May I have a recap of the issues left to be addressed yet? Are those from comment #22 only (yes, I probably just messed up the final, hurried commit with unneeded files)?

Yes, that’s all.

> What’s currently the most up-to-date or otherwise useful repository to work on?

Please work in your own repo (tails@git.tails.boum.org:ma1/download-and-verify-extension).

Other remotes you might want to add:

• the (new) official upstream one that I expect anonym will use for his own maintenance work on DAVE → https://git-tails.immerda.ch/451f/download-and-verify-extension
• Ulrike’s repo (not sure if she will work again on this codebase, but who knows :) → https://git-tails.immerda.ch/451f/download-and-verify-extension

#39 Updated by ma1 2017-07-04 20:45:50

• Assignee changed from ma1 to intrigeri
• QA Check changed from Dev Needed to Ready for QA

https://git-tails.immerda.ch/ma1/download-and-verify-extension/commit/?id=6ab989ef3a03b6044a54dc495ab726d42886a16b

#40 Updated by intrigeri 2017-07-05 08:24:55

• Assignee changed from intrigeri to anonym

Reassigning to the new maintainer of DAVE :)

#42 Updated by intrigeri 2017-07-05 16:46:59

• Target version changed from Tails_3.1 to Tails_3.2

(Taking into account anonym’s availability.)

#43 Updated by intrigeri 2017-09-07 08:24:27

• Priority changed from Normal to Elevated
• Target version changed from Tails_3.2 to Tails_3.3

I suggest you ignore DAVE until the 3.2 release and then put it on your list of top priorities for the 3.3 cycle.

#44 Updated by intrigeri 2017-11-06 15:29:51

• Target version changed from Tails_3.3 to Tails_3.5

I suspect DAVE v2 will make this obsolete, so postponing.

#45 Updated by anonym 2017-12-04 10:39:35

• Status changed from In Progress to Rejected
• Assignee deleted (anonym)
• % Done changed from 60 to 0
• QA Check deleted (Ready for QA)

intrigeri wrote:
> I suspect DAVE v2 will make this obsolete, so postponing.

Yup => rejected.