[Letsencrypt-devel] Bug#861513: python-certbot: Missing dependency on python-ndg-httpsclient from jessie-backports

[John Morahan]

Package: python-certbot
Version: 0.10.2-1~bpo8+1
Severity: important

Dear Maintainer,

Some certbot users reported errors after installing from jessie-backports:

$ certbot --help
Traceback (most recent call last):
  File "/usr/bin/certbot", line 6, in <module>
    from pkg_resources import load_entry_point
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3019, in <module>
    @_call_aside
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3003, in _call_aside
    f(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 3032, in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 655, in _build_master
    ws.require(__requires__)
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 963, in require
    needed = self.resolve(parse_requirements(requirements))
  File "/usr/lib/python2.7/dist-packages/pkg_resources/__init__.py", line 849, in resolve
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'ndg-httpsclient; extra == "security"' distribution was not found and is required by requests

I noticed that python-requests recommends python-ndg-httpsclient but neither
it nor any certbot package explicitly depends on it. However certbot appears
to be completely unusable without it.
I was able to reproduce these errors by installing with:
sudo apt install certbot -t jessie-backports --no-install-recommends

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages python-certbot depends on:
ii  python-acme            0.10.2-1~bpo8+1
ii  python-configargparse  0.11.0-1~bpo8+1
ii  python-configobj       5.0.6-1
ii  python-cryptography    1.3.4-1~bpo8+2
ii  python-mock            1.0.1-3
ii  python-openssl         16.0.0-1~bpo8+1
ii  python-parsedatetime   1.4-1
ii  python-requests        2.11.1-1~bpo8+1
ii  python-rfc3339         1.0-4~bpo8+1
ii  python-setuptools      33.1.1-1~bpo8+1
ii  python-six             1.8.0-1
ii  python-tz              2012c+dfsg-0.1
ii  python-zope.component  4.2.1-2
ii  python-zope.interface  4.1.1-3.1
pn  python:any             <none>

Versions of packages python-certbot recommends:
ii  certbot        0.10.2-1~bpo8+1
pn  python-psutil  <none>

Versions of packages python-certbot suggests:
pn  python-certbot-doc  <none>

-- no debconf information