Debian Patches

Status for rust-pgp/0.15.0-2

Patch Description Author Forwarded Bugs Origin Last update
0001-Drop-rpgp-backward-compat-test.patch [PATCH 1/5] Drop rpgp backward-compat test
This test is for dealing with ecdh padding -- older versions of rpgp
couldn't handle proper ecdh padding, so this tries to confirm that
rpgp doesn't generate padding that would be incompatible with those
old versions.

However, it requires an entirely different copy of (a different
version of) rpgp in order to be able to do the test.

For debian's purposes, we're fine without this test.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2024-08-30
0002-Drop-wasm-not-for-Debian-right-now.patch [PATCH 2/5] Drop wasm -- not for Debian right now
This would create a dependency on the js feature of getrandom, which
is not in debian at the moment.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2024-08-30
0003-Reorder-dependencies.patch [PATCH 5/5] Reorder dependencies
Debian doesn't handle range dependencies when the upper values in the
range aren't in debian, because the buildd network always selects the
first of a conjunction, and the versions are sorted in that order.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed 2024-08-30
0004-avoid-prerelease-derive_more.patch No need for accepting prerelease versions of derive_more
Debian doesn't typically package pre-release crates, so debcargo
complains with:

debcargo failed: Cannot represent prerelease part of dependency:
derive_more Comparator { op: Caret, major: 1, minor: Some(0),
patch: Some(0), pre: Prerelease("beta.6") }

This avoids such a complaint.
Daniel Kahn Gillmor <dkg@fifthhorseman.net> not-needed
0005-avoid-unstable-curve-448.patch Avoid unstable-curve448-
The x448 crate hasn't had a release in over 2 years, while several of
its dependencies are still rather unstable (in particular,
ed448-goldilocks and rand_core have had at least one
semver-incompatible bump since the x448 release, and ed448-goldilocks
itself probably needs another release as well, since there are many
useful cleanup changes pending there).

This makes me think that x448 isn't quite ready for prime time in the
existing rust ecosystem. Given that ed448 itself is also not
supported yet, it seems like any work with Curve448 might be premature
to make available by default.

So, we avoid the x448 stuff for debian for now.

See also https://github.com/rpgp/rpgp/pull/426
Daniel Kahn Gillmor <dkg@fifthhorseman.net> no 2025-01-30

All known versions for source package 'rust-pgp'

Links