Re: OpenSSL 1.1.0

2016-11-19 Thread Bernd Zeimetz
On 11/19/2016 11:59 PM, Simon Richter wrote: > My dream solution at this point would be to organize a week-long > hackfest somewhere where we move everything to GnuTLS if possible. Are you sure that makes things better? I've seen too many weird issues with GnuTLS. What about LibreSSL? -- Be

Re: Let's stop using CVS for debian.org website

2016-11-19 Thread Paul Wise
On Sun, Nov 20, 2016 at 10:45 AM, Boyuan Yang wrote: > Needless to say there are various tools that can help convert a CVS repo into > a SVN repo or Git repo and they handle this job properly. This idea comes up every few years but we haven't yet found someone with the time, skills and motivation

Bug#845071: ITP: node-core-js -- Javascript Standard library

2016-11-19 Thread Sruthi Chandran
Package: wnpp Severity: wishlist Owner: Sruthi Chandran X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-core-js Version : 2.4.1 Upstream Author : FIX_ME upstream author * URL : https://github.com/zloirock/core-js#readme * License : Expat Prog

Bug#845070: ITP: node-loader-utils -- utils for webpack loaders

2016-11-19 Thread Pirate Praveen
Package: wnpp Severity: wishlist Owner: Pirate Praveen X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-loader-utils Version : 0.2.16 Upstream Author : Tobias Koppers @sokra * URL : https://github.com/webpack/loader-utils#readme * License : Expa

Let's stop using CVS for debian.org website

2016-11-19 Thread Boyuan Yang
(CC-ing to debian-devel for a larger audience. But please, use debian-www instead of debian-devel for the discussion to avoid the crossposting hell.) Hi all, As a newcomer who wants to contribute to the Debian website, I was shocked when I heard that debian.org website is still using CVS to man

Bug#845063: ITP: html2canvas -- Take screenshots of webpages directly in the browser

2016-11-19 Thread Ximin Luo
Package: wnpp Severity: wishlist Owner: Ximin Luo * Package name: html2canvas Version : 0.5.0~beta4 Upstream Author : 2012-2016 Niklas von Hertzen * URL : https://github.com/niklasvh/html2canvas * License : Expat Programming Lang: JS Description : Take

Re: OpenSSL 1.1.0

2016-11-19 Thread Kurt Roeckx
On Sat, Nov 19, 2016 at 10:32:58PM +0100, Ondrej Novy wrote: > Hi, > > 2016-11-19 21:06 GMT+01:00 Kurt Roeckx : > > > Chacha20 would be a new feature. Following the policy that can't > > be added in a 1.0.2 version, only bugs get fixed in it. > > > > yep, they don't add new feature, but break AP

Re: testing OpenSSL 1.1.0 on jessie

2016-11-19 Thread Sebastian Andrzej Siewior
On 2016-11-18 15:53:20 [+0100], Daniel Pocock wrote: > Is this correct? I have thrown it on sbuild with a Jessie environment and I got more header files. There is a build log [0] around and this directory cointains also the resulting .deb files. [0] https://breakpoint.cc/openssl-110c-rebuild-for-

Re: OpenSSL 1.1.0

2016-11-19 Thread Simon Richter
Hi, On 19.11.2016 23:07, Marco d'Itri wrote: >> plugin messes with those internals. For example, for apache2 there is >> gridsite >> which uses mod_ssl private interfaces and a private copy of a header from >> the >> apache2 sources to get access to the SSL context. Finding all such issues in

Re: OpenSSL 1.1.0

2016-11-19 Thread Marco d'Itri
On Nov 19, Stefan Fritsch wrote: > plugin messes with those internals. For example, for apache2 there is > gridsite > which uses mod_ssl private interfaces and a private copy of a header from the > apache2 sources to get access to the SSL context. Finding all such issues in > all packages wil

Re: OpenSSL 1.1.0

2016-11-19 Thread Ondrej Novy
Hi, 2016-11-19 21:06 GMT+01:00 Kurt Roeckx : > Chacha20 would be a new feature. Following the policy that can't > be added in a 1.0.2 version, only bugs get fixed in it. > yep, they don't add new feature, but break API between 1.1.0b->c release: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug

Re: OpenSSL 1.1.0

2016-11-19 Thread Kurt Roeckx
On Sat, Nov 19, 2016 at 06:30:06PM +0100, Bernd Zeimetz wrote: > On 11/17/2016 12:40 AM, Kurt Roeckx wrote: > > On Mon, Nov 14, 2016 at 07:10:00PM +, Niels Thykier wrote: > >> > >> The alternative for ChaCha20 would be to adopt Cloudflare's patches[1], > >> but that sort of assumes that you are

Re: OpenSSL 1.1.0

2016-11-19 Thread Bernd Zeimetz
On 11/17/2016 12:40 AM, Kurt Roeckx wrote: > On Mon, Nov 14, 2016 at 07:10:00PM +, Niels Thykier wrote: >> >> The alternative for ChaCha20 would be to adopt Cloudflare's patches[1], >> but that sort of assumes that you are only interested in openssl 1.1 for >> ChaCha20 (and not the other chan

Re: Multi-Arch: allowed

2016-11-19 Thread Adrian Bunk
On Sat, Nov 19, 2016 at 05:53:04PM +0100, Julien Cristau wrote: > On Tue, Nov 1, 2016 at 18:11:27 +0100, Thibaut Paumard wrote: > > > The -dbg package is Multi-Arch same. It Depends on the packages for > > which it provides debugging symbols, some of which are Multi-Arch: > > allowed. > > That D

Re: Multi-Arch: allowed

2016-11-19 Thread Julien Cristau
On Tue, Nov 1, 2016 at 18:11:27 +0100, Thibaut Paumard wrote: > The -dbg package is Multi-Arch same. It Depends on the packages for > which it provides debugging symbols, some of which are Multi-Arch: > allowed. That Depends seems wrong, there's no reason a -dbg package needs a dependency on any

Bug#845028: ITP: node-grunt-contrib-nodeunit -- Run Nodeunit unit tests

2016-11-19 Thread Pirate Praveen
Package: wnpp Severity: wishlist Owner: Pirate Praveen X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-grunt-contrib-nodeunit Version : 1.0.0 Upstream Author : Grunt Team (http://gruntjs.com/) * URL : https://github.com/gruntjs/grunt-contrib-nodeunit#r

Bug#845027: ITP: node-cson-parser -- Safe parsing of CSON files

2016-11-19 Thread Ross Gammon
Package: wnpp Severity: wishlist Owner: Ross Gammon * Package name: node-cson-parser Version : 1.3.4 Upstream Author : Groupon * URL : https://github.com/groupon/cson-parser * License : BSD-3-Clause Programming Lang: JavaScript Description : Safe parsi

Bug#845025: ITP: node-file-sync-cmp -- Synchronous file comparison

2016-11-19 Thread Ross Gammon
Package: wnpp Severity: wishlist Owner: Ross Gammon * Package name: node-file-sync-cmp Version : 0.1.1 Upstream Author : Martin Geisler (http://geisler.net/) * URL : https://github.com/mgeisler/file-sync-cmp/ * License : Expat Programming Lang: JavaScript

Bug#845024: ITP: node-applause -- Pattern replacer that helps creating human-friendly replacements

2016-11-19 Thread Ross Gammon
Package: wnpp Severity: wishlist Owner: Ross Gammon * Package name: node-applause Version : 1.2.2 Upstream Author : outaTiME (http://outa.im/) * URL : https://github.com/outatime/applause#readme * License : Expat Programming Lang: JavaScript Description

Bug#845017: ITP: node-grunt-contrib-internal -- Internal tasks for managing the grunt-contrib projects

2016-11-19 Thread Pirate Praveen
Package: wnpp Severity: wishlist Owner: Pirate Praveen X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-grunt-contrib-internal Version : 1.2.2 Upstream Author : Grunt Team (http://gruntjs.com/) * URL : https://github.com/gruntjs/grunt-contrib-internal#r

Bug#845013: ITP: node-grunt-replace -- Replace text patterns with applause

2016-11-19 Thread Ross Gammon
Package: wnpp Severity: wishlist Owner: Ross Gammon * Package name: node-grunt-replace Version : 1.0.1 Upstream Author : outaTiME (http://outa.im/) * URL : https://github.com/outatime/grunt-replace#readme * License : Expat Programming Lang: JavaScript Descr

Re: OpenSSL 1.1.0

2016-11-19 Thread Stefan Fritsch
On Friday, 18 November 2016 22:22:59 CET Moritz Mühlenhoff wrote: > Adrian Bunk schrieb: > > And/or get sponsorship from companies for supporting ChaCha20-patched > > 1.0.2 > > It's not a matter of whipping up some patch; anything less than an > official backport of chacha20 into a 1.0.2x release

Bug#844996: ITP: rambo-k -- Read Assignment Method Based On K-mers

2016-11-19 Thread Andreas Tille
Package: wnpp Severity: wishlist Owner: Andreas Tille * Package name: rambo-k Version : 1.21+r5 Upstream Author : Simon Tausch * URL : http://rambok.sourceforge.net/ * License : LGPL Programming Lang: Perl, Java Description : Read Assignment Method Bas