On Wed, Sep 01, 2010 at 11:00:42PM +0200, Emmanuel Bouthenot wrote:
Until eventually fixed upstream, could we perhaps provide an empty CRL at that fallback location?If we want to do that we have to be careful to not break current installations (which uses the CA bundle provided by ca-certificates). I still think that adding a dependency on ca-certiticates is a good compromise for now (and squeeze). The ball is in your court, I'll let you choose.
Well, my stand in this is that recommending ca-certificates is fine and dandy, and we need nothing more than that.
A package failing to work out-of-the-box when recommendations are ignored is not a packaging bug as I read Debian Policy. It is a user deliberately overriding a usability feature of Debian in favor of a flexibility feature.
So if you honestly let me choose, I suggest we simply close this as a non-bug.
Kind regards, - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
signature.asc
Description: Digital signature

