Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1307397 > unrolled thread

Bug#980893: [PATCH] Support SCRAM-SHA-1 etc via libgsasl

Started byAndreas Metzler <ametzler@bebt.de>
First post2026-09-01 19:30 +0200
Last post2026-09-01 19:30 +0200
Articles 1 — 1 participant

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Bug#980893: [PATCH] Support SCRAM-SHA-1 etc via libgsasl Andreas Metzler <ametzler@bebt.de> - 2026-09-01 19:30 +0200

#1307397 — Bug#980893: [PATCH] Support SCRAM-SHA-1 etc via libgsasl

FromAndreas Metzler <ametzler@bebt.de>
Date2026-09-01 19:30 +0200
SubjectBug#980893: [PATCH] Support SCRAM-SHA-1 etc via libgsasl
Message-ID<NyAt3-eB8J-5@gated-at.bofh.it>
Control: tags -1 - pending

On 2026-08-30 Simon Josefsson <simon@josefsson.org> wrote:
> sön 2021-01-24 klockan 18:18 +0100 skrev Andreas Metzler:
> > On 2021-01-23 Simon Josefsson <simon@josefsson.org> wrote:
> > > Package: exim4
> > > Tags: patch
> > 
> > > Hi!
> > 
> > > The patch below links exim4-daemon-heavy to libgsasl to enable the
> > > 'gsasl' authenticator support in exim, see:
> > 
> > > https://exim.org/exim-html-current/doc/html/spec_html/ch-the_gsasl_authenticator.html
> > 
> > > This makes it possible to enable SCRAM-SHA-1 and SCRAM-SHA-256 in
> > > Exim
> > > via libgsasl.
> > 
> > > Any chance this could make it into bullseye?  Thanks :)
> > [...]

> > I am very reluctant to link exim against another SASL library since
> > it
> > is already linked against the Cyrus SASL library.

> Hi!  Any chance this could be revisited?  Linking to both Cyrus SASL
> and GNU SASL is similar to linking to both MySQL and PostgreSQL in my
> mind.  Exim already links to multiple similar libraries too, e.g.
> OpenSSL/GnuTLS, libcrypto/libnettle.

Hello Simon,

The upload to fix this was rejected during NEW processing, dfsg team now
seems to have a hard requirement for DEP5.

I will need to check whether exim4's copyright file can be maintained
with cme, a oneshot conversions just increases the maintenace burden.

Anyway this is going to take at least a couple hours, and I do not
know yet when I have the time and an energy to spend on this. So I am
removing the *pending* tag.

cu Andreas
-- 
"You people are noisy," Nia said.
I made the gesture of agreement.

[toc] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web