Re: server certificates/key pairs and CA directories

2015-08-02 Thread Antti Järvinen
Daniel Pocock writes: > Looking through various Debian boxes, I can't help noticing a range of > directories under /etc/ssl, e.g. I have no idea if this has been discussed before but what it comes to private key storage, there is program named tpmtool (part of GnuTLS) that allows storing privat

Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-02 Thread Antonio Diaz Diaz
Steve Langasek wrote: No. Computer science is mathematics. Algorithms are mathematics. Software is something else. You cannot "prove" that a customer's priorities are wrong. Debian is not the customer, but the developer. It is compelled by its social contract to provide high-quality materi

Bug#794421: ITP: axel -- light command line download accelerator

2015-08-02 Thread Joao Eriberto Mota Filho
Package: wnpp Severity: wishlist Owner: Joao Eriberto Mota Filho * Package name: axel Version : 2.4 Upstream Author : Giridhar Appaji Nag Y * URL : http://axel.alioth.debian.org * License : GPL-2+ Programming Lang: C Description : light command line dow

Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-02 Thread Vincent Lefevre
On 2015-08-02 11:45:38 -0700, Russ Allbery wrote: > There were a few long messages to this thread that I didn't absorb in > their entirety, so apologies if this is a repeat. But another angle of > this is that the discussion is about using lzip *for Debian packages*. In > that context, being tole

Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-02 Thread Russ Allbery
Vincent Lefevre writes: > On 2015-07-29 00:21:54 +0200, Antonio Diaz Diaz wrote: >> A compressed file is like an envelope with a message inside. The >> objective of the decompressor is to extract the message and deliver it >> intact to the user. > The problem is that data could have been appende

Re: Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-02 Thread Vincent Lefevre
On 2015-07-29 00:21:54 +0200, Antonio Diaz Diaz wrote: > A compressed file is like an envelope with a message inside. The objective > of the decompressor is to extract the message and deliver it intact to the > user. The problem is that data could have been appended to a compressed file (thanks Fi

Re: Adding support for LZIP to dpkg, using that instead of xz, archive wide

2015-08-02 Thread Wouter Verhelst
On Fri, Jul 31, 2015 at 12:30:12AM +0200, Svante Signell wrote: > Incredible, Debian does no longer adopt to the world of free software > (not opensource) :( I wonder how RMS feels about this? Regardless of whether the removed quote was correctly representing the opinion of the Debian project, I f

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Aug 02, 2015 at 05:44:06PM +0200, Christoph Anton Mitterer wrote: > Some ideas that pop up in my mind: > - Would be yet another location of privacy leak in Debian, where the > system automatically calls "home" to some more commercial than > com

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Jonas Smedegaard
Quoting Daniel Pocock (2015-08-02 18:49:16) > On 02/08/15 17:44, Christoph Anton Mitterer wrote: >> - Would be yet another location of privacy leak in Debian, where the >> system automatically calls "home" to some more commercial than >> community organisations. > > This would not be automatic.

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
On 02/08/15 17:44, Christoph Anton Mitterer wrote: > On Sun, 2015-08-02 at 16:37 +0200, Daniel Pocock wrote: >> I apologize for not being more explicit, this is the sort of thing I >> was thinking too, it wouldn't be up to dpkg or postinst to guess or >> insist on a particular CA. Rather, it w

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Christoph Anton Mitterer
On Sun, 2015-08-02 at 16:37 +0200, Daniel Pocock wrote: > I apologize for not being more explicit, this is the sort of thing I > was thinking too, it wouldn't be up to dpkg or postinst to guess or > insist on a particular CA. Rather, it would be an optional prompt > and there would be some scri

Bug#794392: ITP: orthanc-dicomweb -- Plugin to extend Orthanc with support of WADO and DICOMweb

2015-08-02 Thread Sebastien Jodogne
Package: wnpp Severity: wishlist Owner: Sebastien Jodogne * Package name: orthanc-dicomweb Version : 0.1 Upstream Author : Sebastien Jodogne * URL : http://www.orthanc-server.com/static.php?page=dicomweb * License : AGPL Programming Lang: C++ Description

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
On 2 August 2015 16:20:51 CEST, Jonas Smedegaard wrote: >Quoting Marco d'Itri (2015-08-02 12:36:19) >> On Aug 02, Daniel Pocock wrote: >> >>> Does anybody prefer to see packages create certificates during >>> postinst or is there any preference not to try that and let people >do >>> so manually

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Jonas Smedegaard
Quoting Marco d'Itri (2015-08-02 12:36:19) > On Aug 02, Daniel Pocock wrote: > >> Does anybody prefer to see packages create certificates during >> postinst or is there any preference not to try that and let people do >> so manually? > There is no point in trying to get a certificate from letsen

Re: Bug#791072: icu: library transition may be needed when GCC 5 is the default

2015-08-02 Thread Dimitri John Ledkov
On 2 August 2015 at 12:59, Matthias Klose wrote: > On 08/02/2015 01:44 PM, László Böszörményi (GCS) wrote: >> Control: tags -1 help >> >> Hi Matthias, >> >> On Sun, Aug 2, 2015 at 12:18 AM, László Böszörményi (GCS) >> wrote: Pretty please upload the version from experimental to unstable

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Marco d'Itri
On Aug 02, Daniel Pocock wrote: > Does anybody prefer to see packages create certificates during postinst > or is there any preference not to try that and let people do so manually? There is no point in trying to get a certificate from letsencrypt every time you install a package if you already

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 2 August 2015 11:25:35 CEST, Paul Wise wrote: >On Sun, Aug 2, 2015 at 4:50 PM, Daniel Pocock wrote: > >> Does anybody know which packages create or use the /etc/ssl/ssl.* > >That looks like a sysadmin created path, only one package even mentions >it: > >https://codesearch.debian.net/search?q=/e

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Paul Wise
On Sun, Aug 2, 2015 at 4:51 PM, Daniel Pocock wrote: > Does anybody prefer to see packages create certificates during postinst > or is there any preference not to try that and let people do so manually? I certainly would not expect packages to call out to the Internet in this situation, at least

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Paul Wise
On Sun, Aug 2, 2015 at 4:50 PM, Daniel Pocock wrote: > Does anybody know which packages create or use the /etc/ssl/ssl.* That looks like a sysadmin created path, only one package even mentions it: https://codesearch.debian.net/search?q=/etc/ssl/ssl -- bye, pabs https://wiki.debian.org/PaulWis

Bug#794368: ITP: netty-tcnative -- Tomcat Native fork for Netty

2015-08-02 Thread Emmanuel Bourg
Package: wnpp Severity: wishlist Owner: Emmanuel Bourg * Package name: netty-tcnative Version : 1.1.33.Fork4 Upstream Author : The Apache Software Foundation, The Netty Project * URL : http://netty.io/wiki/forked-tomcat-native.html * License : Apache-2.0 Prog

certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
Does anybody prefer to see packages create certificates during postinst or is there any preference not to try that and let people do so manually? The Let's Encrypt CA also has a client utility, letsencrypt[1], that could be very useful from the postinst script. With any CA, there can sometimes

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 21/07/15 18:50, Thorsten Glaser wrote: > Daniel Pocock pocock.pro> writes: > >> I looked at the package ssl-cert to try and understand and there I found >> that it is using /etc/ssl/certs for server certs while other packages > > Do NOT do that. > I wasn't suggesting that was desirable, i

Re: Ad-hoc survey of existing Debian git integration tools

2015-08-02 Thread Guido Günther
On Sat, Aug 01, 2015 at 05:07:38PM +0100, Ian Jackson wrote: > Guido Günther writes ("Re: Ad-hoc survey of existing Debian git integration > tools"): > > On Fri, Jul 31, 2015 at 03:21:59PM +0100, Ian Jackson wrote: > > > I think the problems you are describing arise when the user does _both_ > > >