On 2022-04-11 19:16:41, Bjarni Ingi Gislason wrote:
> Package: pv
> Severity: wishlist
>
> Dear Maintainer,
>
>   The version of package "pv" is out of date.

You are correct in stating that (a) the package is out of date and (b)
the watch file fails to find the new release...

>   The watch file has a wrong website to search, should be
> .../programs/sources/pv...
>
>   The search for the VCS repository has a wrong website. 

... but that's not the reason. The reason is the website uses an antique
diffie-hellman key:

anarcat@angela:pkg-pv$ uscan
uscan warn: In watchfile debian/watch, reading webpage
  https://www.ivarch.com/programs/pv.shtml failed: 500 Can't connect to 
www.ivarch.com:443 (SSL connect attempt failed error:141A318A:SSL 
routines:tls_process_ske_dhe:dh key too small)

Paradoxically, disabling security on that one (ie. using HTTP) fixes the
problem. I'll warn upstream and carry on with updating to the latest for
now.

Thanks for the heads up!

-- 
Our scientific power has outrun our spiritual power. We have guided
missiles and misguided men.
                        - Martin Luther King, Jr.

Reply via email to