[Pkg-cacti-maint] Bug#1117523: cacti: Please use php-phpseclib3 instead of php-phpseclib

[David Prévot]

Hi Paul,

On 10/7/25 19:41, Paul Gevers wrote:
> On 10/7/25 07:58, David Prévot wrote:
>> It looks like cacti is the last package in Debian depending on
>> php-phpseclib (v2). It would be nice if it moves to php-phpseclib3 (v3)
>> so that we could get rid of the php-phpseclib package with the next
>> Debian release.
> 
> 
> Is there any change needed in the code or is this a drop in replacement? 
> I.e. should this be done upstream?

There are definitely changes needed to use it directly, and I do believe 
that should be addressed upstream (bug tagged already).

https://phpseclib.com/docs/why#phpseclib-30-vs-phspeclib-10--20

I did not try and figure out how to properly report the issue upstream, 
as I trust you know better (and yes, I may admit laziness). It *looks* 
like phpseclib 2 will still be supported upstream for the time being, 
but it also looks like most other upstream projects have moved to 
phpseclib 3 (at least all those packaged in Debian), hence this wishlist 
bug.

Regards,

taffit