Your message dated Wed, 20 Mar 2024 02:57:44 +0000
with message-id <[email protected]>
and subject line Bug#1065007: fixed in pycurl 7.45.3-2
has caused the Debian Bug report #1065007,
regarding pycurl: Please reconsider SSL choice (OpenSSL instead of GnuTLS)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1065007: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065007
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pycurl
Version: 7.45.2-7
Severity: normal
X-Debbugs-CC: [email protected]
Dear Debian pycurl maintainer,
I was made aware of issues encountered by multiple users due to pycurl using
GnuTLS instead of OpenSSL. Reviewing https://bugs.debian.org/515200 , it looks
like the
only reason of not using OpenSSL is the old OpenSSL licensing issue in the past.
With OpenSSL 3.0 and later, linking against OpenSSL is obviously no longer
problematic
due to license switching to Apache-2.0. As a result, I am once again requesting
using
OpenSSL for SSL implementation for pycurl or at least adding an option for
users to select.
Currently I believe several options exist:
1) Switch the default package python3-pycurl to use OpenSSL.
2) Add a new binary package python3-pycurl-openssl, which is linked to OpenSSL.
3) Add binary packages python3-pycurl-openssl and python3-pycurl-gnutls, and let
python3-pycurl to be an empty dependency package that may default to a certain
implementation of your choice.
In any case, the binary packages providing the same files and the same
functionalities shall mutually conflict with each other.
If you need patches for any of the choices, please let me know. Please also let
me
know if you have any comments. If needed, I can make package uploads via Team
upload.
Thanks!
Best,
Boyuan Yang
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---
Source: pycurl
Source-Version: 7.45.3-2
Done: Scott Talbert <[email protected]>
We believe that the bug you reported is fixed in the latest version of
pycurl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Scott Talbert <[email protected]> (supplier of updated pycurl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 19 Mar 2024 19:50:13 -0400
Source: pycurl
Architecture: source
Version: 7.45.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Scott Talbert <[email protected]>
Closes: 1065007
Changes:
pycurl (7.45.3-2) unstable; urgency=medium
.
* Switch to building with openssl (Closes: #1065007)
Checksums-Sha1:
7b6ab2850cdb509ab1ad8411c70a640a9a852194 2521 pycurl_7.45.3-2.dsc
7a031cca167214723a9169142f315313c8cac2e0 10936 pycurl_7.45.3-2.debian.tar.xz
6b5a960ea0e739b333f1b09b5d446d525e2af721 9876 pycurl_7.45.3-2_amd64.buildinfo
Checksums-Sha256:
d59c4fe09278b2f6a6192e27373dd434945bae337f39c576d667452ec3011baf 2521
pycurl_7.45.3-2.dsc
c653c0a749023840a572bd9211eff2bb7e3be2c371377ad8e0ef6bad61859220 10936
pycurl_7.45.3-2.debian.tar.xz
b84d19852dad1721e384cd5147250dcf5f4fb5eab7c162bc55c09f40c6c3d4c9 9876
pycurl_7.45.3-2_amd64.buildinfo
Files:
b13a5073ce9848ab190c897bd0773ec9 2521 python optional pycurl_7.45.3-2.dsc
4d77dd00cea2165825eb60022ca6d7c0 10936 python optional
pycurl_7.45.3-2.debian.tar.xz
8e116bff45d5eeb11c1fc7494be936a2 9876 python optional
pycurl_7.45.3-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=tIK0
-----END PGP SIGNATURE-----
pgptHb8hKmgE5.pgp
Description: PGP signature
--- End Message ---
