Hi Andrew,

Here is some news from the Debian package! :) I know you sometimes
follow the updates in the bugtracker so I am sorry if this is a
duplicate for you, but I wanted to let you know that our "new upstream
release" scanner has failed to find the latest and greatest pv recently.

That was filed as bug 1009330 in Debian (a copy of which follows). I
tracked down the problem to an HTTPS configuration. Both curl and Perl's
LWP fail to download the homepage to parse for new releases:

$ curl -I https://www.ivarch.com/programs/pv.shtml
curl: (35) error:141A318A:SSL routines:tls_process_ske_dhe:dh key too small

LWP is used by uscan, the software which powers this scanner, and makes
this impossible to use.

I strongly recommend updating the diffie-hellman key in your web browser
configuration.

Failing that, I have managed to download the package over cleartext
(plain HTTP!) but I would rather avoid that if possible (although the
OpenPGP signature checks out, so the risk is small there).

Another option I considered would be to parse the GitHub releases
instead, but since the tar.gz you provide is different from the one
generated from the git-archive command, this is quite error-prone...

Thank you for maintaining pv! :)

a.

On 2022-04-11 19:16:41, Bjarni Ingi Gislason wrote:
> Package: pv
> Severity: wishlist
>
> Dear Maintainer,
>
>   The version of package "pv" is out of date.
>
>   The watch file has a wrong website to search, should be
> .../programs/sources/pv...
>
>   The search for the VCS repository has a wrong website. 

Reply via email to