Debian Patches

Status for rust-pgp/0.14.2-3

Patch Description Author Forwarded Bugs Origin Last update
0001-Drop-rpgp-backward-compat-test.patch [PATCH 1/5] Drop rpgp backward-compat test
This test is for dealing with ecdh padding -- older versions of rpgp
couldn't handle proper ecdh padding, so this tries to confirm that
rpgp doesn't generate padding that would be incompatible with those
old versions.

However, it requires an entirely different copy of (a different
version of) rpgp in order to be able to do the test.

For debian's purposes, we're fine without this test.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2024-08-30
0002-Drop-wasm-not-for-Debian-right-now.patch [PATCH 2/5] Drop wasm -- not for Debian right now
This would create a dependency on the js feature of getrandom, which
is not in debian at the moment.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2024-08-30
0003-Drop-the-nightly-feature-not-for-Debian.patch [PATCH 3/5] Drop the nightly feature -- not for Debian
Nightly builds are irrelevant for distribution. we're not going to
ship them, and they block our attempt to do tests with --all-features.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2024-08-30
0004-Reorder-dependencies.patch [PATCH 5/5] Reorder dependencies
Debian doesn't handle range dependencies when the upper values in the
range aren't in debian, because the buildd network always selects the
first of a conjunction, and the versions are sorted in that order.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed 2024-08-30
0005-Gate-x448-work-behind-an-x448-feature.patch [PATCH] Gate x448 work behind an "x448" feature.
The x448 crate hasn't had a release in over 2 years, while several of
its dependencies are still rather unstable (in particular,
ed448-goldilocks and rand_core have had at least one
semver-incompatible bump since the x448 release, and ed448-goldilocks
itself probably needs another release as well, since there are many
useful cleanup changes pending there).

This makes me think that x448 isn't quite ready for prime time in the
existing rust ecosystem. Given that ed448 itself is also not
supported yet, it seems like any work with Curve448 might be premature
to make available by default.

This patch proposes to put the x448 code behind a feature named
"x448". It will also make it easier to land the rest of the RFC 9580
work in debian, which is currently struggling with the unmaintained
dependency chain here.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> yes 2024-10-22
0006-avoid-prerelease-derive_more.patch No need for accepting prerelease versions of derive_more
Debian doesn't typically package pre-release crates, so debcargo
complains with:

debcargo failed: Cannot represent prerelease part of dependency:
derive_more Comparator { op: Caret, major: 1, minor: Some(0),
patch: Some(0), pre: Prerelease("beta.6") }

This avoids such a complaint.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed
0007-drop-profiling.patch Drop profiling/benchmarks
riscv64 CI takes so long that it is timing out (see
https://ci.debian.net/packages/r/rust-pgp/testing/riscv64/ )

If https://salsa.debian.org/rust-team/debcargo/-/merge_requests/71 is
merged, we might be able to use the proposed test_architecture
mechanism and drop this patch.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed
0008-relax-bitfield.patch Allow build against bitfield 0.17
rPGP's use of bitfield is very simple and is not affected by
bitfield's changes.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no

All known versions for source package 'rust-pgp'

Links