[Reproducible-builds] Bug#831569: libwebsockets: please make the build reproducible

[Chris Lamb]

Source: libwebsockets
Version: 1.7.3-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi,

Whilst working on the "reproducible builds" effort [0], we noticed
that libwebsockets could not be built reproducibly.

Patch attached. Whilst it uses a deterministic key (!!), this is
a) a test server and b) key was not being varied for each installation
prior to this patch, so it is "no worse".

 [0] https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/keys/libwebsockets-test-server.key.pem	1970-01-01 02:00:00.000000000 +0200
--- b/debian/keys/libwebsockets-test-server.key.pem	2016-07-17 13:53:45.083618700 +0200
@@ -0,0 +1,16 @@
+-----BEGIN PRIVATE KEY-----
+MIICdwIBADANBgkqhkiG9w0BAQEFAASCAmEwggJdAgEAAoGBAM8ZUC3tOkX70b0x
+I9wneuXYkaCuwnH4RJ7INmYKzHAJG1Efu54w774mSi1dcoyBDY9z9fjHPLFIweV8
+UOqeWpTdyYjN30lnEyZAan1Or7LQsJyiMUpJ8GlGTOi9ZMEPNO8KF780RhWoa/h8
+8+GCboTAcNOf47HK42y7kREYiFOlAgMBAAECgYAHqCDtwcKQydGkVAfGYPNLQimI
+Lk3kFtC6qh5QwX9zePK4mhq+q4KBnjrJ2JWemjrdHeVvMDaPO2hnyqPXOMmSfFml
+O1P1psR5NW5wSBcYE11Meg6gEarkPu3jiRvCxkeQIRn0L1MxNerSzOkNwEqCQ1vH
+kOZlrSdv59BbM47lYQJBAPhJ5QfcECG4axwqs/jBbBibit4BooEGInH03MYCaaUr
+XDf2uSQqYRMdOHBcfCTjPrAugI/U1cmXYJAXJYDbLXkCQQDVh+zIhzAbm5rtWKVA
+cXsuRQ2btbeaHVEYyykgjtWPnVcpY/ppWJx7hj+aE+RuUMnUCB3z2i7HmRAofYLK
+6IiNAkEAkjXpslwr/797C8Y13zn/7unBuAScboBvTk4UqGIJVmOXVblrw1lVew0N
+DFXaIVrUsqlfudNq5eDH03Jd+miXeQJAAx1kethd/0kZzXSJlJMTNO2U8TyJXRoo
+YLA1/V+YBexJpTTsJjVAsxyWOO0pW+KZzxn/Ndts60R0U+Lg0Yzq0QJBAL9v/cqP
+sBXBbTDp4ZxTCfWh4uOQNn748FK6mBfclBk3+IOwx7/1anmv3+O3bTinV2KuyW8F
+IYYyvBhRllIRUD4=
+-----END PRIVATE KEY-----
--- a/debian/keys/libwebsockets-test-server.pem	1970-01-01 02:00:00.000000000 +0200
--- b/debian/keys/libwebsockets-test-server.pem	2016-07-17 13:53:51.091669875 +0200
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/debian/libwebsockets-test-server-common.install	2016-07-17 13:22:43.963341073 +0200
--- b/debian/libwebsockets-test-server-common.install	2016-07-17 13:57:15.969410550 +0200
@@ -1 +1,2 @@
 usr/share/libwebsockets-test-server/*
+debian/keys/* usr/share/libwebsockets-test-server