From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Tue, 28 Apr 2026 10:45:05 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-wm1-f64.google.com (mail-wm1-f64.google.com [209.85.128.64]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 63S8j5hH008297 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 28 Apr 2026 10:45:05 +0200 Received: by mail-wm1-f64.google.com with SMTP id 5b1f17b1804b1-48906aa28cbsf72430355e9.0 for ; Tue, 28 Apr 2026 01:45:05 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1777365900; cv=pass; d=google.com; s=arc-20240605; b=TlPflQFd2VJpvDifkoybbrIfwXN4dWNNcC6m86Ax04c9XqdwkoQsGksHgDfSKXOkUK TeMz3K4BuAsyI6oAfcCSM1f+iK5vtDDcmoM9V4XdQlFoz+4HYraeKT39oVODv/7P2yZi czUdmJS9QLsiFCw5LONxjaURRoOmZQ7kWVY4FH4gJgljczVylvUhfICPSXC/WngCzPi2 SE02q3JzNzfSjSMStPMIdbbdt1vfx+PiI+ejwvfmrXhsdfJ0B5vdB0nzNIr+g5MfDCBV 6ACOAF4loBrT3s8Lo9YcrdAm04GbsSjAEyUtVZfnTWphd09UGd0k7AZHWsZ+edn+EUN3 OwOg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:mime-version :content-transfer-encoding:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:to:from:sender:dkim-signature; bh=SnNwBhpcNaP3MdDrqIDmjhlMJ/hjRK7WfAnxYKdMo/o=; fh=ZpjYcGVX90jqih6Epyca5QwB9yYIwB1US7LK8nF48yw=; b=Z0CZkz1xlqZB056Y8naYdJU3YwLweF9lQD57cZ7W5Tie9YCUN45ArNQrUH+BmwZwGx XE6T5ytBZnwkqR+SSDMn627ImyiMaNWjEydGS+H04dbj2+Iq04mw1ewFk/JZZxWYWWA/ mzHgmBBEUUZLE2uTIUDrOmr+NFljD2gwhMQT/JlePr7RaWW+UGp4E8p0ettMwuPo23Az IyoSxf/6YjcFtW0gAga9y+5wtL7tW9oGNNTQYn78NPMJamOgvQDY4CTQSVPkmuK6kPeZ OG2q9D2UPbz7/szHWEXgKyAdmFTTYvDL4wZd7FM71gxo1ppt9oUIaeMTGdNjxaIW2mYH 9e9w==; darn=ilbers.de ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@kumkeo.de header.s=bcsel2403 header.b=Xgj0WeXw; spf=pass (google.com: domain of ulrich.teichert@kumkeo.de designates 194.29.227.95 as permitted sender) smtp.mailfrom=ulrich.teichert@kumkeo.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1777365900; x=1777970700; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:mime-version:content-transfer-encoding :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:to:from:sender:from:to:cc :subject:date:message-id:reply-to; bh=SnNwBhpcNaP3MdDrqIDmjhlMJ/hjRK7WfAnxYKdMo/o=; b=crmbBY+SWFealUMz5Ba9b3jcy1nF9I+OMDhvKyWc1Q4qr6Vpyn+sAJg2srJTy+q8qZ wKa41BxvwP/LO8AecFifN5wY32iWA2dgjZN7PXPgtpMerId1shhAlczgrTPH1t3xcD+p pZaplJFKSVoa5iz7PdKoYDQG0IkSbC24KojCNsg9Krxtk2TgeVYD7NaoNNICSVXlknyj pGU06IqLIWFYVAtySY7U6NYLAE0acdRJ5HWvVGf9N5PTEDGGzfAQ4yZrumGjyQSXBVDR /UZMUoz9oOwxW7GEAlLU5B0vEVRunmhQ64A4uK/BzXR4Y1ztBs1XpkjwjBX7sSm0zvry yFTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1777365900; x=1777970700; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-language:accept-language :in-reply-to:references:message-id:date:thread-index:thread-topic :subject:to:from:x-beenthere:x-gm-message-state:sender:from:to:cc :subject:date:message-id:reply-to; bh=SnNwBhpcNaP3MdDrqIDmjhlMJ/hjRK7WfAnxYKdMo/o=; b=cZvWdW06N1QDw3psla/bUO+8HT8pVYrUbOL64XsCbmzrOQ/IOqIz1qwmJqYr2JQB1E LFx1cs3y60z7PbtMAkn1q6vL7E/Vgu7vt0XXFPrflR3FNudbYd28DVqv9tAQTXgR0lFq 3Wt7QtaGXecDK6SLDdpYik1mZSnwATauuBrGVYSUCLZwIASc7Pxh3AsiGy/i0cVr9I8c gEybsQyU1ANQZ8PtPP8F4ivXb1YEDVAjxYDyn5t8bCAcGrF0WVp9OLdZDk81g8gsgFqL W2rYH1H1x4NHmw9/RGdyXdhQ9bCTAPapt3NTJkQ3X+KIxAUv2Wr+BcwuO3b0o3t9/fVA L3OQ== Sender: isar-users@googlegroups.com X-Forwarded-Encrypted: i=2; AFNElJ+VbJAjfyWFmQaI779CBsLuVATLYIA0nVR9BRaj0L6aJcB57ojQS3cHwGqqVPMDoFVLFBb3@ilbers.de X-Gm-Message-State: AOJu0Yzk+HXzmWz286fk9diVi3YcDiyKlVBCdqucsL/XBQPdW8NdFsyS AsfHA8K3F9pIh3CjNtsWmoCJ3H4VaZR1Xy35e4wvTEQ/XAs5NtHVDuK6 X-Received: by 2002:a05:600c:3ba6:b0:489:1baf:8c03 with SMTP id 5b1f17b1804b1-48a78a43734mr24816625e9.11.1777365899503; Tue, 28 Apr 2026 01:44:59 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="AUV6zMOn0xCA0oNMO2R1T2N7FcIHbko1UsyseYLf1ZlhaBydww==" Received: by 2002:a05:600c:8889:10b0:488:d074:3a3 with SMTP id 5b1f17b1804b1-488f08befadls30985415e9.1.-pod-prod-00-eu-canary; Tue, 28 Apr 2026 01:44:57 -0700 (PDT) X-Received: by 2002:a05:600c:5492:b0:489:1abb:5559 with SMTP id 5b1f17b1804b1-48a789221e6mr22425995e9.5.1777365897488; Tue, 28 Apr 2026 01:44:57 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1777365897; cv=none; d=google.com; s=arc-20240605; b=Ivy4KSJrm1LE4u2CbcJ/UxPE6adlAq+tlcY9Wy90HMTqCuEUDwoqT9LcsAv+7QDMRO EvOfIY1kTygbKPZkPDuQmOCyggZy+WpNFpu3/XgAB3iWdNwVE70nAvagHUTpkiPfDnf2 n0DGtQcU8Cr5aVcbvTxgQ7Zvk9HNJQkDZhD1oTjTfpXUFIaOsmRcRJuB5IP7UwUHJq3H xFP0oZ0pBo6+CGFX3jBpM51eNRtn5hnmqmpzNU5+2zhXgaiQGmQxohO6B8Qimd6byTCT Tb7GIqev5OoosmgrPEVcJumFjZZFNats5DJ+rskfzX7kvpSyLtUsiT6tJMibfh9i11Ui rmow== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=dkim-signature:mime-version:content-transfer-encoding :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:to:from; bh=A7YOd86YKQXquxLm60gIC7hqg45+ioygQ0f6F4OW9zI=; fh=OCLipNJhBAjuYZVWe88RgIbTd+C/BiXjPppf4/h0OyA=; b=LbtDyicigiIAJhDy2NwME6N4lrQlt4jKQI2T37P+eIkpCwM9QyajA6/lnXvYXIDvFW DKlq0EhxhvMKgwOcpjweYXTJnH/7aQ0mzLy74mrNRtquzrzdzi4ZyETPf7uTZtc79rwr 5bz1zyNMIsgL3qejh68kjOFs0vCXXW0Y9u1BKvNdkWk5+bxhgpq0M3OmqjHn6smJDosf 2ADwAJ4VMb+UYdrN1VtelKFpmncoEiCQbNwomDIxXuLTQ98ydRx5/TsT0zT7M/bLwSMr 2+eBbT38jLQ1lKRcr0cKgKB00DDnOibJTtVL8bCQDDZbFl0jG/J1f+YT/jw3CJz/c07H 4L2w==; dara=google.com ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@kumkeo.de header.s=bcsel2403 header.b=Xgj0WeXw; spf=pass (google.com: domain of ulrich.teichert@kumkeo.de designates 194.29.227.95 as permitted sender) smtp.mailfrom=ulrich.teichert@kumkeo.de Received: from mgw400.mail.berlinercloud.net (mgw400.mail.berlinercloud.net. [194.29.227.95]) by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-48a773ab42dsi369965e9.2.2026.04.28.01.44.57 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 28 Apr 2026 01:44:57 -0700 (PDT) Received-SPF: pass (google.com: domain of ulrich.teichert@kumkeo.de designates 194.29.227.95 as permitted sender) client-ip=194.29.227.95; X-TM-AS-ERS: 172.19.2.115-127.5.254.253 X-TM-AS-SMTP: 1.0 bWd3MzYwLm1haWwuYmVybGluZXJjbG91ZC5uZXQ= dWxyaWNoLnRlaWNoZ XJ0QGt1bWtlby5kZQ== X-DDEI-TLS-USAGE: Used Received: from mgw360.mail.berlinercloud.net (unknown [172.19.2.115]) by mgw400.mail.berlinercloud.net (Postfix) with ESMTPS for ; Tue, 28 Apr 2026 10:44:55 +0200 (CEST) X-DDEI-TLS-USAGE: Used Received: from mail.kumkeo.de (unknown [172.19.2.2]) by mgw360.mail.berlinercloud.net (Postfix) with ESMTPS for ; Tue, 28 Apr 2026 10:44:55 +0200 (CEST) Received: from kumex2.kumkeo.de (172.18.20.16) by kumex2.kumkeo.de (172.18.20.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.61; Tue, 28 Apr 2026 10:44:54 +0200 Received: from kumex2.kumkeo.de ([fe80::6572:2554:d711:1795]) by kumex2.kumkeo.de ([fe80::6572:2554:d711:1795%2]) with mapi id 15.01.2507.061; Tue, 28 Apr 2026 10:44:54 +0200 From: Ulrich Teichert To: "isar-users@googlegroups.com" Subject: AW: Re: HTTPs connection during bootstrap Thread-Topic: Re: HTTPs connection during bootstrap Thread-Index: AQHc1uJUJyfeaJ6uiEObcR6wCQXlybX0InLJ Date: Tue, 28 Apr 2026 08:44:54 +0000 Message-ID: <46f2271795ae485db5d2a840699875c6@kumkeo.de> References: <3a6bc2de-5694-4a72-90fd-6fcb5a62587en@googlegroups.com>,<2b9c7c31-2ff0-41c3-8e66-8f9a86199252@siemens.com> In-Reply-To: <2b9c7c31-2ff0-41c3-8e66-8f9a86199252@siemens.com> Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [185.228.242.37] x-tm-as-product-ver: SMEX-14.0.0.3247-9.1.2019-29910.006 x-tm-as-result: No-10--6.355000-8.000000 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No x-tm-snts-smtp: 371D07716F14CBE136E75FBDA32FC1D0867FB5F2959A3FDF4B445FCEBEED8FDE2000:9 x-c2processedorg: c2164c60-77f9-4731-9233-294e5719f64e Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-TMASE-Version: DDEI-5.1-9.1.1004-29910.006 X-TMASE-Result: 10--9.256700-10.000000 X-TMASE-MatchedRID: eJqiI9jl+homUsYaerPjs/HkpkyUphL9pWOBfK9L1z9BZrnb76yA2Y93 WUsgC0Xi4KAVx+i/7MyYPAnqzJ6WOsjroKRD7pZMs0T0PE+KHuX4qCLIu0mtIPfrxqj+aaaT7Of p4TaCvCeq6ReY3OhyyJOuryM7ofsMXrmIPORRwl5uq3SU2oCL/k+crEA4+nhZ5z4wjBWAS5c56G dZxUF9VtBKZ4nBEMJkdskSexkA2tue0VSg7Z0eIQPZZctd3P4BWpjCJBXWSUiiqEAYtjjyhREKz xfjGi8XuF3dQlVss5lehbG5gR/GL53eYgeOVg/fkoioV0NwG5wy23f4RtRqJFZrX9dWsjqVA5YS HWdShDG6iIPZBKf+YjKHYLsR4q0LQv21zJNl0CyDGx/OQ1GV8sj4n/1zCcLSEh7V7ReEjoWOhzO a6g8KrdveVVihztCOXghaNVm8QEOgUlIXgYveCktaZvJKv9VGjFZdZFZnhgU= X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:0-0 X-TMASE-INERTIA: 0-0;;;; X-TMASE-XGENCLOUD: ab1a132e-1fe6-429e-99b9-a9f2a3896f74-0-0-200-0 X-Original-Sender: ulrich.teichert@kumkeo.de X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@kumkeo.de header.s=bcsel2403 header.b=Xgj0WeXw; spf=pass (google.com: domain of ulrich.teichert@kumkeo.de designates 194.29.227.95 as permitted sender) smtp.mailfrom=ulrich.teichert@kumkeo.de Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.6 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: qoDnPQ3ehpd8 Hi Jan, [del] >> What would be the best way to inject the missing certificates into the >> bootstrapping >> process? >Bootstrapping is done within the environment of your host or kas-isar in >case you use the build container. So, one way is to enrich the >appropriate environment with that special certificate prior to starting >the build. Right, simple and works perfectly. Good to know that the host environment is simply passed through. >Another one is to explore the extension of do_apt_config_prepare of the >bootstrap class with setting for >https://manpages.debian.org/trixie/apt/apt-transport-https.1.en.html. OK, for the moment I'm fine with modifying the host environment, but I may come back to that later if we have to deal with more than our own repository. >There is no convenient way of configuring this via Isar variables >because that case is too uncommon. Normally, one signs the repo itself, >and can thus disable/ignore transport security. I can't rule out that we will have to deal with repositories ouside of our organisation in the future, so using one security layer more may become necessary, but agreed: currently this is just overkill (but our IT departme= nt loves it...), thanks, Uli Mit freundlichen Gr=C3=BC=C3=9Fen / Best regards Dipl.-Inform. Ulrich Teichert Senior Software Engineer Phone +49 431 375938-0 _____________________________________ e.bs kumkeo GmbH Am Kiel-Kanal 1 24106 Kiel, Deutschland kumkeo.de Rechnungen bitte an e.bs kumkeo GmbH, Heidenkampsweg 82a, 20097 Hamburg Gesch=C3=A4ftsf=C3=BChrer Michael Leitner, G=C3=BCnter Hagspiel Registergericht Amtsgericht Hamburg Registernummer HRB 187712 USt-Idnr. DE449906070 --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 46f2271795ae485db5d2a840699875c6%40kumkeo.de.