A short update: The same sha1 code is indeed present in current Upstream code (including version 1.8.x currently in Testing/Ustable and also the Upstream trunk).
Ron Lee pointed out, though, that RFC3174 has been obsoleted by RFC6234[1], and the latter actually has a sane license for the included code. So looks like some work is needed, but the replacement code is obvious. Thanks for the report. [1] http://www.rfc-editor.org/rfc/rfc6234.txt -- Tzafrir Cohen icq#16849755 jabber:tzafrir.co...@xorcom.com +972-50-7952406 mailto:tzafrir.co...@xorcom.com http://www.xorcom.com iax:gu...@local.xorcom.com/tzafrir -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org