Dear Maintainer,

The privoxy check-ssl autopkgtest is flaky and unreliable. It utilises
badssl.com which regularly returns 503 or other error instead of the expected
403.

  62s 2026-06-26 09:08:52: Requesting https://expired.badssl.com/
  62s 2026-06-26 09:08:52: Ooops. We expected status code 403, but received: 503.

This breaks privoxy's autopkgests and (perhaps more importantly) introduces
apparent regressions in other packages.

The Github source for badssl.com[1] makes it clear that baddssl.com is not
suitable for automated CI testing.

Please remove the test, or at least mark it flaky until it can provide the
necessary reliability and coverage.

Thanks.

Mark

[1]  https://github.com/chromium/badssl.com#disclaimer

Re: Mark Hindley

pgsql-http had a similar problem with https://httpbun.org/. We managed
to get it working using gunicorn:

https://salsa.debian.org/postgresql/pgsql-http/-/blob/master/debian/tests/installcheck?ref_type=heads#L6-9

Christoph

We believe that the bug you reported is fixed in the latest version of
privoxy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1141069@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Roland Rosenfeld <roland@debian.org> (supplier of updated privoxy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 20 Oct 2026 20:22:17 +0200
Source: privoxy
Architecture: source
Version: 4.2.0-2
Distribution: unstable
Urgency: medium
Maintainer: Roland Rosenfeld <roland@debian.org>
Changed-By: Roland Rosenfeld <roland@debian.org>
Closes: 1138398 1141069
Changes:
 privoxy (4.2.0-2) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * Install and use sysusers.d/tmpfiles.d config files.
 .
   [ Roland Rosenfeld ]
   * Small changes on tmpfiles.d fitting the old postinst.
   * 35_openssl4: Add support for OpenSSL 4.x (Closes: #1138398).
   * Update debian/upstream/signing-key.asc subkey.
   * 36_tolerate-flakiness: ignore flaky bad-ssl tests (Closes: #1141069).
   * Upgrade to debhelper 14 (use dh-sequence-single-binary, prefix most
     debian/* files with "privoxy.")
   * salsa-ci.yml: allow_failure for uscan (SorceForge is flaky).
   * Remove undefined ${misc:Pre-Depends}, ${perl:Depends}.
   * debconf-updatepo to fix rename from templates to privoxy.templates.
Checksums-Sha1:
 cedafbb36c1b456dd12b99f2cab7095ac80bbabc 2476 privoxy_4.2.0-2.dsc
 791eac8ee435683e6e47bfb515173001e9c92276 36624 privoxy_4.2.0-2.debian.tar.xz
 cdcbed25c41be5860f7b3c60f03f38a1dd821629 11011 privoxy_4.2.0-2_source.buildinfo
Checksums-Sha256:
 74a789c2b2deecd8645672c44c6f0dbec62fa339dec65becc62e03d16204306f 2476 privoxy_4.2.0-2.dsc
 06cb03ad1e386087e472dd8d382ec56d8badc950b7e58c3fce49ecbad3096455 36624 privoxy_4.2.0-2.debian.tar.xz
 58eb0caf48b3dabde3b2569f564290e8e8e282a3d83a2f52bce419269bb9749f 11011 privoxy_4.2.0-2_source.buildinfo
Files:
 081e7b4a03295e091bdef5e9fd0b558e 2476 web optional privoxy_4.2.0-2.dsc
 5db205a752135176e4d608ec92ad2a9b 36624 web optional privoxy_4.2.0-2.debian.tar.xz
 2f1cea398ef6dd46b2087d4c0e6b2aac 11011 web optional privoxy_4.2.0-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEErC+9sQSUPYpEoCEdAnE7z8pUELIFAmrXsXoACgkQAnE7z8pU
ELLrQg//b20hO9cmEiZwTklmUIlI41s5TiGWlUGO/xQsMqO8zqSBFt9HYUlgekzM
WKV2DyXg3mfn1RNglsYnIFbw1qgAvdRRXPStrITWf488+RZkOerhZjE7slrQ644V
AREXyMGsy7lD3kUFyFsq0dbAR866aMDxPKz+laXsxFXCb2MwBHhBM0oDHl1fJJ++
D/winUzRofzDC2InnSTeO/+y+xxD+1D5G86IbIXkFdng6X4qWJI1q4/h2ujCtoxp
r4lNe05kWseoEE9/z70bqjZ3eMQ736uViUYvDcqz80/ASB35MSoNScq4Dr6fUJsR
0DsKA8OndesB7LY8AVJwfBkVzfw6f1VYfUD89TCY0Y/WXsee/nP8j+6/6x6I1+ey
gMMpeUOUPzZIGGzCDKXD/hgzIfzcaUtIX09YAr3S/yN2Hoi7pg6TAx8vMZ2TnSho
H/IAuJZimWQeXBLq3tScyyG2fQaUYMoyWkW/+ahScNSeIqyBVSQqm/SlBO2BSJyJ
+68E0PCBVT9QELHn/FN592XtFLBY9H1NlXe9TZpcLc9GWTHeu8kFybR3pexV10Nl
4U8N6cz55OG+fUaYjs+dTkaBMpZ7Ev4Z+ZdPZiRC5ywigpuHJ1oCfWb5BrOCf3wQ
2R/DTo4tCVRPCXoeXFjoUYKPka/8tsHolNehmllMJaHBzseUtLw=
=XToh
-----END PGP SIGNATURE-----

We believe that the bug you reported is fixed in the latest version of
privoxy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1141069@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Roland Rosenfeld <roland@debian.org> (supplier of updated privoxy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 21 Oct 2026 20:05:44 +0200
Source: privoxy
Architecture: source
Version: 4.2.0-3
Distribution: unstable
Urgency: medium
Maintainer: Roland Rosenfeld <roland@debian.org>
Changed-By: Roland Rosenfeld <roland@debian.org>
Closes: 1141069
Changes:
 privoxy (4.2.0-3) unstable; urgency=medium
 .
   * Now really ignore flaky bad-ssl tests (Closes: #1141069).
Checksums-Sha1:
 3f6c98682f8af369f1f700732e6e82470d20737d 2476 privoxy_4.2.0-3.dsc
 2e7fdc063637c7d482d85a044e9f5127c9ae1220 36688 privoxy_4.2.0-3.debian.tar.xz
 b84f01144a34ed96a81fa05531c117bde1e8358b 11011 privoxy_4.2.0-3_source.buildinfo
Checksums-Sha256:
 aebc6588739dde1ecf1b5222d660904c3a45f8f8d949455a6521a645deaa2670 2476 privoxy_4.2.0-3.dsc
 fddafe615594f6b9eb4d19e8e32f0b95c44245242859d492c3b7993670c415af 36688 privoxy_4.2.0-3.debian.tar.xz
 81d306263eb068f6d68358ef5767ff715ab838c25d8c4fc5dafe299efb7c3fe5 11011 privoxy_4.2.0-3_source.buildinfo
Files:
 3742d2bb06069fd72fb46a8e163dafa0 2476 web optional privoxy_4.2.0-3.dsc
 996fcef6e9aaf9f95664f61e2f1e769e 36688 web optional privoxy_4.2.0-3.debian.tar.xz
 44812fd4c7e5000f14d271881c7fbd87 11011 web optional privoxy_4.2.0-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=px5+
-----END PGP SIGNATURE-----