Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?

From	Chrysostomos Nanakos <chris@include.gr>
Newsgroups	linux.debian.bugs.rc
Subject	Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?
Date	2025-11-16 23:10 +0100
Message-ID	<LRT6y-duqw-1@gated-at.bofh.it> (permalink)
References	<LROqd-drrj-5@gated-at.bofh.it> <Lf0b7-4oNC-5@gated-at.bofh.it> <LROqd-drrj-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi Andreas,
fair enough. Let’s remove it with next step being the packaging of yubiserver-rs. 

Kind regards,
Chrysostomos. 

> On 16 Nov 2025, at 19:07, Andreas Tille <tille@debian.org> wrote:
> 
> Hi again,
> 
> Am Sat, Aug 02, 2025 at 07:46:56AM +0200 schrieb Andreas Tille:
>> Am Fri, Aug 01, 2025 at 11:01:05PM +0300 schrieb Chrysostomos Nanakos:
>>> Hey Andreas,
>>> just saw your email with regard the yubiserver.
>> 
>> thanks a lot for your fast response.
>> 
>>> I have stopped working on this implementation and using the rust implementation instead. It can be found here if you are interested replacing it or use it:
>>> 
>>> https://github.com/cnanakos/yubiserver-rs
>> 
>> Cool.  This sounds very promising.
> 
> While yubiserver-rs sounds promising it means on the other hand that the
> yubiserver package in Debian is orphaned.  Now since bug has RC severity
> it might make sense to remove this packagage from Debian and I intend to
> do so after waiting one month.
> 
>>> I would like to find some time package it and replace the existing one but with no luck so far.
>> 
>> I admit I would like to support your packaging attempt but I can't
>> promise anything since I have no experience with Rust packaging.  I
>> trust that someone in the team might help in case of stumbling stones.
>> 
>> Could you be more verbose about "no luck so far"?
>> 
>> When checking the repository I noticed there are no release tags.  I
>> would recommend adding such tags to let the world (not only the Debian
>> packagers) know, what commit might be of release quality (in contrast to
>> development commits).  In Debian we could point the watch file to these
>> tags.
> 
> I have not seen any tags yet.  I also need to admit I did not had packaged
> any Rust package yet and can't backup your attempt with any knowledge here.
> 
>> Alternatively we could create a new package yubiserver-rs make it
>> providing yubiserver and remove the original yubiserver from Debian (if
>> you think there is no real use for it any more).
> 
> Mean while I think removing the current package from Debian seems like a
> sensible way to go to not attract users to orphaned security software.
> 
> Kind regards
>    Andreas.
> 
> --
> https://fam-tille.de

Back to linux.debian.bugs.rc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Chrysostomos Nanakos <chris@include.gr> - 2025-11-16 23:10 +0100
  Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Simon Josefsson <simon@josefsson.org> - 2025-11-20 13:00 +0100
    Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Andreas Tille <tille@debian.org> - 2025-11-20 14:50 +0100
    Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Andreas Tille <tille@debian.org> - 2025-11-24 11:40 +0100

csiph-web