libgcrypt20 backported to stretch

[Andreas Metzler]

On 2017-10-11 "Matteo F. Vescovi" <mfv at debian.org> wrote:
> I'm writing you because I'm trying to bring Remmina[1] to stretch
> again after its removal[2], through Debian backports.

> But, to achieve this, I have to follow some preliminary steps:
>  - backport libgcrypt20 due to libssh from testing failing due to some
> tests[3] on stretch version of gcrypt
>  - backport libssh 0.8
>  - backport freerdp2

Hello Matteo,

remmina Seems to be a popular package. ;-)
Raphaël had contacted us at libgcrypt20 at pdo about a month with exactly
the same question.
http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/2017-September/008096.html

We had some back and fore, but the main point is that it is not
necessary to backport libgcrypt. All that is needed is simple patch to
libssh to fix its testsuite failure due to incorrect assumptions on how
gcrypt versions look like (not necessarily [0-9]+.[0-9]+.[0-9]+").
Suggested patch is here:
http://lists.alioth.debian.org/pipermail/pkg-gnutls-maint/2017-September/008101.html

I hope that helps.

As libgcrypt has its share of security issues due to its usage scope I
would strongly prefer to not have a bpo unless it is unavoidable.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'