[pkg-gnupg-maint] responsibility for libgcrypt and libksba

Andreas Metzler ametzler at bebt.de
Thu Apr 16 17:25:44 UTC 2015


On 2015-04-14 Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> Hi Debian GnuPG and GnuTLS packaging teams--

> I just did a review of GnuPG dependencies in debian, and i notice that
> the GnuTLS packaging team has taken responsibility for libgcrypt and
> libksba.

> However, modern versions of GnuTLS don't use libksba or libgcrypt, since
> GnuTLS switched to nettle for its cryptoprimitives.

> I don't know that we have the bandwidth to maintain many more complex
> package in the GnuPG packaging team, but it does seem a bit odd that the
> GnuTLS team is stuck maintaining these packages that they aren't using
> direclty.

> libksba in particular appears to *only* be used by GnuPG2 at this point.

> Is there a way that we can collaborate on these packages usefully?

Hello,

iirc libksba has never been used by gnutls as long as I have been
maintaining it, it was just part of the crypto package bundle Matthias
Urlichs used to maintain. It is very low-maintainance, though.

not mind taling care of it.

I have not got ay hard numbers, but I think that curently almost all
commits to the GnuTLS git repos have my name on it. BTS work is
different, apart from me especialy Simon Josefsson and you seem to be
quite active. I am sorry if I have forgot anyone, this is just from
the top of my head.

I have not got shiny new ideas on how to improve collaboration, just
the obvious stuff:
- If you want to, you  would be very welcome to GIT commit rights and to
  adding yourself as uploader.
- I do not currently mind maintaining libksba and/or libgcrypt but you
  are also welcome to take them over if it improves things.
- The packages could also be moved over to the gnupg repo and the
  pkg-gnupg-maint@ group with me continueing to have upload/commit
  rights. - If I did the bulk of the work I would strongly prefer to
  continue using the current debian/-only GIT layout, though.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20150416/ea9e4f1c/attachment.sig>


More information about the pkg-gnupg-maint mailing list