[Pkg-auth-maintainers] Bug#982348: Bug#981804: yubioath-desktop: fails to read yubikey

[nicoo]

Control: severity -1 normal
Control: tag -1 + wontfix


Norbert,

On Tue, Feb 09, 2021 at 02:47:51PM +0900, Norbert Preining wrote:
> that looks now really bad considering that
> - you packaged an alpha version of yubikey-manager
> - the alpha version transitioned to testing

Being an alpha version is not a bug.  This was coordinated with upstream,
who is working to ensure there's a final 4.0 release soon.


> - yubioauth-desktop remains broken

Yes, there is a UI bug in yubioath-desktop now (extraneous data getting
displayed), which is getting fixed as we speak.


> - the last properly released version of yubikey-manager is 3.1.2 which
>   was released bit of 2 weeks ago

Since you are so interested in the minutia of packaging the Yubico ecosystem,
you could have looked at that release, and saw it only adds a flag marking it
as incompatible with fido2 0.9.  It would have made little sense to “update”
from 3.1.1 to 3.1.2.


> How do you plan to clean up this mess, in particular considering that
> freeze is immiment?

Exactly as is currently going on: fixing the one remaining bug.
Throwing tantrums and opening spurious Severity: serious bugs is only making a
larger mess.

Moving to fido2 0.9 and ykman 4.0a1 was a deliberate move: I discussed with
upstream and they moved up their release schedule in order to accomodate the
Debian bullseye release.

I did so because this lets me get rid of all C dependencies, including a few
which have had recurring issues (both packaging and security).


> Uploading an alpha version close before freeze deadline wasn't the best
> idea I have to say.
> 
> I would suggest reuploading 3.1.2 as 4.0.0~a1+really3.1.2-1 or something
> similar.

I'm aware the timing isn't ideal, but it's the best that could be done.

I would suggest being a little more patient and letting maintainers actually
maintain.


  nicoo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-auth-maintainers/attachments/20210210/0ff60af0/attachment.sig>