Bug 277409 - security/dehydrated: should run daily to update OCSP information before they expire
Summary: security/dehydrated: should run daily to update OCSP information before they ...
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Koichiro Iwao
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-03-01 04:56 UTC by Matthias Fechner
Modified: 2024-03-11 05:12 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (meta)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Fechner freebsd_committer freebsd_triage 2024-03-01 04:56:36 UTC 
Currently dehydrated is executed weekly which causes the OCSP information to expire.

Could you please change it to have dehydrated to be executed daily?

Or at least make it configureable that users having OCSP file do not get problems?

Thanks a lot!
Comment 1 Koichiro Iwao freebsd_committer freebsd_triage 2024-03-02 02:30:47 UTC 
I'll look into this.
Comment 2 commit-hook freebsd_committer freebsd_triage 2024-03-06 04:29:48 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=8b99252493ebd9ad3c26b430af4de57021c46e6e

commit 8b99252493ebd9ad3c26b430af4de57021c46e6e
Author:     Koichiro Iwao <meta@FreeBSD.org>
AuthorDate: 2024-03-06 04:04:02 +0000
Commit:     Koichiro Iwao <meta@FreeBSD.org>
CommitDate: 2024-03-06 04:28:44 +0000

    security/dehydrated: Update to 0.7.1-6-g4fd777e

    Also add another periodic file to run dehydrated more frequent than
    weekly because OSCP response file should be updated before expiry [1].

    PR:             277409
    Reported by:    mfechner [1]

 security/dehydrated/Makefile                       | 16 ++++----
 security/dehydrated/distinfo                       |  6 +--
 .../dehydrated/files/000.dehydrated.daily.in (new) | 46 ++++++++++++++++++++++
 ...{000.dehydrated.in => 000.dehydrated.weekly.in} |  0
 security/dehydrated/files/pkg-message.in           | 11 ++++++
 security/dehydrated/pkg-plist                      |  1 +
 6 files changed, 69 insertions(+), 11 deletions(-)
Comment 3 Koichiro Iwao freebsd_committer freebsd_triage 2024-03-06 04:34:31 UTC 
(In reply to Matthias Fechner from comment #0)

I added another periodic file for daily run. Not the port supports both weekly and daily run. Try this instead. 

daily_dehydrated_enable="YES"
Comment 4 Matthias Fechner freebsd_committer freebsd_triage 2024-03-07 07:46:36 UTC 
(In reply to Koichiro Iwao from comment #3)
Thanks a lot, I upgrade the new version already.
Now I need to wait if ocsp files get updated.
They will expire in 136 hours.
Comment 5 Matthias Fechner freebsd_committer freebsd_triage 2024-03-11 05:09:28 UTC 
It is working perfectly fine.
Thanks a lot!
Comment 6 Koichiro Iwao freebsd_committer freebsd_triage 2024-03-11 05:12:08 UTC 
It's my pleasure!