Re: RFH Packaging DNSSEC/TLSA Validator

2014-07-21 Thread Nicolas Dandrimont
Hey Ondřej, * Ondřej Surý [2014-07-22 02:42:03 +0200]: > I just found the upstream misses OpenSSL exception[1], so I will > have to sort it out together with next stable upstream release. > > 1. Do we already have some nice *SSL boilerplate exception that > would allow OpenSSL derivative librar

Bug#755557: ITP: libuid-wrapper -- A wrapper to fake privilege separation

2014-07-21 Thread Jelmer Vernooij
Package: wnpp Severity: wishlist Owner: Jelmer Vernooij * Package name: libuid-wrapper Version : 1.0.1 Upstream Author : Andrew Tridgell, Andreas Schneider * URL : http://www.cwrap.org/ * License : GPLv3 or later Programming Lang: C Description : A wrap

Re: RFH Packaging DNSSEC/TLSA Validator

2014-07-21 Thread Ondřej Surý
Preliminary packaging (aka it compiles and works) can be found: https://github.com/oerdnj/dnssec-validator and packages for wheezy and jessie/amd64 can http://people.debian.org/~ondrej/dnssec-validator/ # no repo, just bare dir I just found the upstream misses OpenSSL exception[1], so I will h

Bug#755541: ITP: libcgi-compress-gzip-perl -- CGI with automatically compressed output

2014-07-21 Thread Robin Sheat
Package: wnpp Severity: wishlist Owner: Robin Sheat * Package name: libcgi-compress-gzip-perl Version : 1.03 Upstream Author : Chris Dolan * URL : https://metacpan.org/release/CGI-Compress-Gzip * License : Artistic or GPL-1+ Programming Lang: Perl Descript

Re: How to build-depend on a C++11-capable compiler?

2014-07-21 Thread Gert Wollny
> Last time I asked: > > https://lists.debian.org/debian-devel/2013/09/msg00335.html > > It was prefered to provide a C++98 ABI compatible library for the time > being. If you start providing a C++11 ABI library people will not be > able to mix symbols from your lib and other part of debian syste

Re: Bug#755285: marked as done (general: Black screen on resume after suspend)

2014-07-21 Thread Andrei POPESCU
On Lu, 21 iul 14, 08:16:54, Paul Wise wrote: > On Sun, Jul 20, 2014 at 9:12 PM, Chris Bannister wrote: > > > Considering the language is English, it would be a pity if the reader > > made this mistake. Let's assume a modicum of 'common sense' at least. > > With an international project like Debia

Re: How Debian should handle users requests?

2014-07-21 Thread Abou Al Montacir
On Sun, 2014-07-20 at 17:01 +0200, Adam Borowski wrote: > On Sun, Jul 20, 2014 at 10:55:55AM +0200, Abou Al Montacir wrote: > > upgrade ==> not working anymore ==> bug > > I think this is a typical acceptable situation, what ever the user's > > level of experience. > > It is more about how much we

Re: How Debian should handle users requests?

2014-07-21 Thread Abou Al Montacir
Hi Holger, On Mon, 2014-07-21 at 13:30 +0200, Holger Levsen wrote: > Hi Abou, > > On Sonntag, 20. Juli 2014, Abou Al Montacir wrote: > > Then I'd propose to have an other pseudo package "support" and a new > > mailing list alias for d-u@l.d.o called for example support@d.o which > > does not link

aptitude / package purged

2014-07-21 Thread Vincent Lefevre
On 2014-07-18 00:32:25 +0300, Andrei POPESCU wrote: > On Jo, 17 iul 14, 03:17:35, Vincent Lefevre wrote: > > On 2014-07-16 14:28:00 +0200, David Kalnischkies wrote: > > > On Wed, Jul 16, 2014 at 11:36:32AM +0200, Vincent Lefevre wrote: > > > > I do that too. I haven't seen any official documentatio

Re: Solutions for the Apache upgrade hell

2014-07-21 Thread Vincent Lefevre
On 2014-07-17 15:44:18 +0200, Arno Töll wrote: > On 17.07.2014 15:38, Christian Hofstaedtler wrote: > > My understanding was that the new apache binaries would install new > > config files, and it would then work? (With the correct > > replaces/breaks/...) > > Yes. However, Apache has a notable nu

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jakub Wilk
* Peter Palfrader , 2014-07-20, 12:07: we have been moving towards https for most services over the last 12 months. Is that intentional that the http->https redirect for bugs.d.o is only temporary (302)? Should we update devscripts and python-debianbts to use HTTPS for accessing this host?

Bug#755286: closed by Holger Levsen (Re: Bug#755286: general: Black screen on resume after suspend)

2014-07-21 Thread Aleksandar Nikolov
On 07/21/2014 03:52 PM, intrigeri wrote: Hi, Aleksandar Nikolov wrote (21 Jul 2014 12:18:16 GMT) : BUT the laptop had worked pretty well, including suspend and resume, for a month with Jessie system and a kernel by Ubuntu till an update of DEBIAN packages. So I am pretty sure that this is a b

Bug#755522: ITP: r-cran-beeswarm -- The bee swarm plot is a one-dimensional scatter plot like "stripchart", but with closely-packed, non-overlapping points.

2014-07-21 Thread Bob Dybian
Package: wnpp Severity: wishlist Owner: Bob Dybian * Package name: r-cran-beeswarm Version : 0.1.6 Upstream Author : Aron Charles Eklund * URL : http://cran.r-project.org/web/packages/beeswarm * License : Artistic-2.0 Programming Lang: R Description :

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jakub Wilk
* Jacob Appelbaum , 2014-07-21, 13:09: I'm also curious - is there a Debian developer who will not use HTTPS but does use SSH to access servers? Very unlikely, with or without the “but …” part. (But I'm afraid I don't understand what point you're trying to make.) Is Debian still offering te

Re: RFH Packaging DNSSEC/TLSA Validator

2014-07-21 Thread David Prévot
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Control: unblock -1 by 675923 Control: noowner 675923 Control: retitle 675923 RFP: firebreath -- cross-platform browser plugin framework Hi Ondřej, Le 21/07/2014 11:21, Ondřej Surý a écrit : > my team has just produced js-types version of DNSSEC/T

Re: libjpeg-turbo transition

2014-07-21 Thread Ondřej Surý
On Wed, Jul 16, 2014, at 18:05, Ondřej Surý wrote: > Hi Mike > > On Fri, Jul 11, 2014, at 09:33, Mike Gabriel wrote: > > >> > Please also consider filing a > > >> > transition bug to help us (the release team) get an overview of the > > >> > affected packages at your earliest convenience. > > >> >

Re: How Debian should handle users requests?

2014-07-21 Thread Jonathan Dowland
On Mon, Jul 21, 2014 at 08:36:09AM +0800, Paul Wise wrote: > That would be change in meaning of the pseudo-package, it isn't > supposed to be for user support. Personally I don't think that we need > the general/base/cdrom/project pseudo-packages any more. At minimum we > should update reportbug to

RFH Packaging DNSSEC/TLSA Validator (Was: people.debian.org will move from ravel to paradis and become HTTPS only)

2014-07-21 Thread Ondřej Surý
Hi, On Sun, Jul 20, 2014, at 08:47, Tollef Fog Heen wrote: > Not many HTTP clients support DANE, unfortunately, and MITM-ing > DNSSEC-secured domains is a bit more effort than just MITM-ing a > plaintext HTTP connection. my team has just produced js-types version of DNSSEC/TLSA Validator so it wo

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
On Mon, Jul 21, 2014 at 02:38:14PM +, Jacob Appelbaum wrote: > On 7/21/14, Iain R. Learmonth wrote: > By that reasoning, we may not authenticate except by sending plaintext > passwords over such a network. That seems to either be an old policy, > a mistake or a network that is simply hostile t

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Iain R. Learmonth wrote: > Hi Jacob, > > On Mon, Jul 21, 2014 at 01:14:14PM +, Jacob Appelbaum wrote: >> I believe you are mistaken. My understanding is that you're not >> supposed to use crypto on the radio layer and IP packets are already >> several layers away from that concern.

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Paul Wise
On Mon, Jul 21, 2014 at 9:32 PM, Ondřej Surý wrote: > The current problem with HTTPS is that it bundles encryption with > authenticity. > This needs to be unbundled[1]. My opinion is that even a transparent > opportunistic encryption (f.e. like DANE implementation in postfix) > would improve the o

Re: let missing-debian-source-format lintian tag be a warning!

2014-07-21 Thread Charles Plessy
Le Wed, Jul 16, 2014 at 01:35:04AM +0100, Colin Watson a écrit : > > Having followed it up after last year's DebConf, I've been absolutely > sold on git-dpm, FWIW; I find it does a great job of making the patch > queue pleasant to maintain in a git-native style while providing a nice > easy-to-rea

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
Hi Jacob, On Mon, Jul 21, 2014 at 01:14:14PM +, Jacob Appelbaum wrote: > I believe you are mistaken. My understanding is that you're not > supposed to use crypto on the radio layer and IP packets are already > several layers away from that concern. It would be great to hear from > a HAM radio

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Ondřej Surý
On Mon, Jul 21, 2014, at 13:12, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > > The main one is that there are places in the world you just can't use HTTPS > > for legal reasons [...] > > I'm curious, can you name one? http://en.wikipedia.org/wiki/Res

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Iain R. Learmonth wrote: > On Mon, Jul 21, 2014 at 01:12:37PM +0200, Holger Levsen wrote: >> Hi Iain, >> >> On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: >> > The main one is that there are places in the world you just can't use >> > HTTPS >> > for legal reasons [...] >> >> I'm c

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: >> The main one is that there are places in the world you just can't use >> HTTPS >> for legal reasons [...] > > I'm curious, can you name one? > I'm also curious - is there a Debian developer who

Bug#755286: closed by Holger Levsen (Re: Bug#755286: general: Black screen on resume after suspend)

2014-07-21 Thread intrigeri
Hi, Aleksandar Nikolov wrote (21 Jul 2014 12:18:16 GMT) : > BUT the laptop had worked pretty well, including suspend and resume, for a > month with > Jessie system and a kernel by Ubuntu till an update of DEBIAN packages. So I > am > pretty sure that this is a bug of a Debian package. I'm glad

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Holger Levsen
Hi, On Montag, 21. Juli 2014, Iain R. Learmonth wrote: > The United Kingdom when using IPv4 over AX.25 on Amateur Radio. Encryption > is illegal because it goes against the self-policing nature of the amateur > bands. and so are probably prison inmates, workers of armed forces and other who migh

Re: How to build-depend on a C++11-capable compiler?

2014-07-21 Thread Mathieu Malaterre
On Mon, Jul 21, 2014 at 12:48 PM, Thibaut Paumard wrote: > Hi, > > The new release of my package Gyoto should be built preferably with a > C++11-capable compiler. It can be built with a reduced feature-set > without, though. > > Is there a clever way to ensure that the default compiler is > C++11-

Bug#755286: closed by Holger Levsen (Re: Bug#755286: general: Black screen on resume after suspend)

2014-07-21 Thread Aleksandar Nikolov
Dear Holger Levsen, Did you read the submission? Or just found a reason to close the bug? Of course there is a possibility this bug to be not exactly debian. BUT the laptop had worked pretty well, including suspend and resume, for a month with Jessie system and a kernel by Ubuntu till an updat

Bug#755502: ITP: google-translate-cli -- Google Translate to serve as a command line tool

2014-07-21 Thread Andreas Tille
Package: wnpp Severity: wishlist Owner: Andreas Tille * Package name: google-translate-cli Version : 0.0.20140522 Upstream Author : Mort Yao * URL : https://github.com/soimort/google-translate-cli * License : THE_BEER-WARE_LICENSE Programming Lang: awk Des

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
On Mon, Jul 21, 2014 at 01:12:37PM +0200, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > > The main one is that there are places in the world you just can't use HTTPS > > for legal reasons [...] > > I'm curious, can you name one? The United Kingdom whe

Bug#755286: marked as done (general: Black screen on resume after suspend)

2014-07-21 Thread Debian Bug Tracking System
Your message dated Mon, 21 Jul 2014 13:35:30 +0200 with message-id <201407211335.32127.hol...@layer-acht.org> and subject line Re: Bug#755286: general: Black screen on resume after suspend has caused the Debian Bug report #755286, regarding general: Black screen on resume after suspend to be marked

Re: How Debian should handle users requests?

2014-07-21 Thread Holger Levsen
Hi Abou, On Sonntag, 20. Juli 2014, Abou Al Montacir wrote: > Then I'd propose to have an other pseudo package "support" and a new > mailing list alias for d-u@l.d.o called for example support@d.o which > does not link to d-d@l.d.o and providing support for users. > > This new pseudo package "sup

Bug#755495: reportbug should not allow filing bugs against the "general" pseudo-package

2014-07-21 Thread Holger Levsen
package: reportbug severity: wishlist x-debbugs-cc: debian-devel@lists.debian.org Hi, On Samstag, 19. Juli 2014, Arto Jantunen wrote: > I don't think reportbug should allow filing bugs against general at > all. The extremely rare cases when one is needed can be filed manually. As someone (of the

Bug#755493: ITP: apophenia -- open source C scientific library for statistical computing

2014-07-21 Thread Jerome Benoit
Package: wnpp Severity: wishlist Owner: Jerome Benoit * Package name: apophenia Version : 0.999 Upstream Author : Ben Klemens * URL : http://apophenia.info/ * License : GPL2 with modifications Programming Lang: C Description : open source C scientific

myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Holger Levsen
Hi Iain, On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > The main one is that there are places in the world you just can't use HTTPS > for legal reasons [...] I'm curious, can you name one? cheers, Holger signature.asc Description: This is a digitally signed message part.

Re: How to build-depend on a C++11-capable compiler?

2014-07-21 Thread Ondřej Surý
On Mon, Jul 21, 2014, at 12:48, Thibaut Paumard wrote: > Hi, > > The new release of my package Gyoto should be built preferably with a > C++11-capable compiler. It can be built with a reduced feature-set > without, though. > > Is there a clever way to ensure that the default compiler is > C++11-c

How to build-depend on a C++11-capable compiler?

2014-07-21 Thread Thibaut Paumard
Hi, The new release of my package Gyoto should be built preferably with a C++11-capable compiler. It can be built with a reduced feature-set without, though. Is there a clever way to ensure that the default compiler is C++11-capable, if available in the archive, or should I simply Build-Depend on

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Wouter Verhelst
Op maandag 21 juli 2014 11:34:49 schreef Peter Palfrader: > On Mon, 21 Jul 2014, Wouter Verhelst wrote: > > Are you talking about something else? If so, can you clarify in more > > than two words? > > Sure, I can clarify: > > As I understand the RFC, servers MUST NOT send HSTS headers on insecure

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Wouter Verhelst
Op maandag 21 juli 2014 11:34:53 schreef Thijs Kinkhorst: > On Sun, July 20, 2014 21:34, Steve Langasek wrote: > > Because it's not an improvement to the service; it's a change that makes > > the *service* to Debian developers worse, for political reasons. > > I don't agree that it gets worse You'

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Peter Palfrader
On Mon, 21 Jul 2014, Wouter Verhelst wrote: > Op zondag 20 juli 2014 21:22:48 schreef Peter Palfrader: > > On Sun, 20 Jul 2014, Wouter Verhelst wrote: > > > If HSTS is enabled and you access people.debian.org even once (and you > > > don't clear out their entire cache for as long as the HSTS timeo

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Wouter Verhelst
Op maandag 21 juli 2014 17:39:44 schreef Paul Wise: > On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote: > > Yes it does. > > No... > > > I just tried chromium and iceweasel on this laptop (running sid, a few > > days out of date). Both will turn "http://www.debian.org"; into > > "https://ww

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Paul Wise
On Mon, Jul 21, 2014 at 5:22 PM, Wouter Verhelst wrote: > Yes it does. No... > I just tried chromium and iceweasel on this laptop (running sid, a few > days out of date). Both will turn "http://www.debian.org"; into > "https://www.debian.org"; due to HSTS. This works whether I enter the > "http:

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Thijs Kinkhorst
On Sun, July 20, 2014 21:34, Steve Langasek wrote: > Because it's not an improvement to the service; it's a change that makes > the *service* to Debian developers worse, for political reasons. I don't agree that it gets worse or that it is for political reasons, but even if it were, it being polit

Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Wouter Verhelst
Op zondag 20 juli 2014 21:22:48 schreef Peter Palfrader: > On Sun, 20 Jul 2014, Wouter Verhelst wrote: > > If HSTS is enabled and you access people.debian.org even once (and you > > don't clear out their entire cache for as long as the HSTS timeout > > lives), then HSTS will ensure that the HTTP UR