Source: pycurl Version: 7.45.2-7 Severity: normal X-Debbugs-CC: s...@techie.net
Dear Debian pycurl maintainer, I was made aware of issues encountered by multiple users due to pycurl using GnuTLS instead of OpenSSL. Reviewing https://bugs.debian.org/515200 , it looks like the only reason of not using OpenSSL is the old OpenSSL licensing issue in the past. With OpenSSL 3.0 and later, linking against OpenSSL is obviously no longer problematic due to license switching to Apache-2.0. As a result, I am once again requesting using OpenSSL for SSL implementation for pycurl or at least adding an option for users to select. Currently I believe several options exist: 1) Switch the default package python3-pycurl to use OpenSSL. 2) Add a new binary package python3-pycurl-openssl, which is linked to OpenSSL. 3) Add binary packages python3-pycurl-openssl and python3-pycurl-gnutls, and let python3-pycurl to be an empty dependency package that may default to a certain implementation of your choice. In any case, the binary packages providing the same files and the same functionalities shall mutually conflict with each other. If you need patches for any of the choices, please let me know. Please also let me know if you have any comments. If needed, I can make package uploads via Team upload. Thanks! Best, Boyuan Yang
signature.asc
Description: This is a digitally signed message part
