Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #288291 > unrolled thread

Bug#972802: rust-webpki-roots: duplicates ca-certificates, remove from Debian?

Back to article view | Back to linux.debian.bugs.rc

Contents

  Bug#972802: rust-webpki-roots: duplicates ca-certificates, remove from Debian? Paul Wise <pabs@debian.org> - 2020-10-24 03:50 +0200
    Bug#972802: rust-webpki-roots is marked for autoremoval from testing Geert Stappers <stappers@stappers.nl> - 2020-11-01 12:30 +0100
    Bug#972802: marked as done (RM: rust-webpki-roots -- ROM;  duplicates ca-certificates) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2020-11-08 22:50 +0100

#288291 — Bug#972802: rust-webpki-roots: duplicates ca-certificates, remove from Debian?

[Multipart message — attachments visible in raw view] — view raw

Source: rust-webpki-roots
Severity: serious
Tags: security
X-Debbugs-Cc: Debian Security Team <team@security.debian.org>, kpcyrd <git@rxv.cc>
Usertags: embed

rust-webpki-roots is essentially a duplicate of ca-certificates.

https://tracker.debian.org/pkg/ca-certificates
https://wiki.debian.org/EmbeddedCopies

AFAICT, rebuilding the package from source doesn't run the upstream
supplied build.py script, so rebuilding from source won't update the
certs available in the package.

Having to rebuild rust-webpki-roots and everything that depends on it
after every update of ca-certificates would be very annoying though.

Probably rust-webpki-roots should be removed from Debian and replaced
with something that loads the certs from ca-certificates at runtime.

As far as I can tell, nothing in Debian uses rust-webpki-roots, but on
IRC, kpcyrd mentioned that they have projects that use webpki-roots,
CCing them in order to get more info about that usage.

   $ ssh mirror.ftp-master.debian.org dak rm -s unstable -Rn rust-webpki-roots



   Will remove the following packages from unstable:

   librust-webpki-roots-dev | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i386
   rust-webpki-roots |   0.20.0-1 | source
   webpki-roots | 0.20.0-1+b1 | amd64, arm64, armel, armhf, i386

   Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>

   ------------------- Reason -------------------

   ----------------------------------------------

   Checking reverse dependencies...
   No dependency problem found.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

[toc] | [next] | [standalone]

#288971 — Bug#972802: rust-webpki-roots is marked for autoremoval from testing

On Sun, Nov 01, 2020 at 04:39:36AM +0000, Debian testing autoremoval watch wrote:
> rust-webpki-roots 0.20.0-1 is marked for autoremoval from testing on 2020-11-22
> 
> It is affected by these RC bugs:
> 972802: rust-webpki-roots: duplicates ca-certificates, remove from Debian?
>  https://bugs.debian.org/972802
> 

BR is now aware of the deadline of 2020-11-22


Previously in this bug report:
> However, rustls is a common package in Rust world and the Rust team might want to keep it.


Would splitting off  Rust source code and  CA certificates   make sense?

[toc] | [prev] | [next] | [standalone]

#289404 — Bug#972802: marked as done (RM: rust-webpki-roots -- ROM; duplicates ca-certificates)

[Multipart message — attachments visible in raw view] — view raw

Your message dated Sun, 08 Nov 2020 21:42:05 +0000
with message-id <E1kbsRp-000HQK-OW@fasolo.debian.org>
and subject line Bug#972802: Removed package(s) from unstable
has caused the Debian Bug report #972802,
regarding RM: rust-webpki-roots -- ROM; duplicates ca-certificates
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
972802: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972802
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web