Ubuntu
npm package

npm contains hardcoded certificate, so npm is not working anymore..

Bug #1760840 reported by Eero Volotinen
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
npm (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Hi,

Looks like npm contains hardcoded ca certificates that makes it nonworkable after
ssl updates on npm registry: see http://tinyurl.com/npm-bugs

apply fix from http://tinyurl.com/npm-bugs-patch to to config-defs.js to make it workable again, without disabling ssl security features

Eero

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: npm 1.3.10~dfsg-1
ProcVersionSignature: Ubuntu 4.4.0-31.50~14.04.1-generic 4.4.13
Uname: Linux 4.4.0-31-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.21
Architecture: amd64
Date: Tue Apr 3 14:38:14 2018
InstallationDate: Installed on 2018-04-03 (0 days ago)
InstallationMedia: Ubuntu 14.04.5 LTS "Trusty Tahr" - Release amd64 (20160803)
PackageArchitecture: all
SourcePackage: npm
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Eero Volotinen (eero-volotinen) wrote :
Revision history for this message
Eero Volotinen (eero-volotinen) wrote :

bug affects on ubuntu 14.04.x that contains old npm version

Revision history for this message
Eero Volotinen (eero-volotinen) wrote :

contains patch for rhel version, it might work with ubuntu :)

Revision history for this message
Eero Volotinen (eero-volotinen) wrote :

npm ca update patch for rhel. it might work on ubuntu too

Revision history for this message
Eero Volotinen (eero-volotinen) wrote :

/usr/share/npm/node_modules/npmconf/config-defs.js contains code that need to be updated.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "attachment.cgi?id=1416573" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in npm (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.