[Pkg-javascript-devel] Bug#923512: node-sqlite3: please build with sqlcipher support

[Paolo Greppi]

Package: node-sqlite3
Version: 4.0.6+ds1-2
Severity: normal

Please build nodes-qlite3 with support for sqlcipher:
https://github.com/mapbox/node-sqlite3#building-for-sqlcipher

This is required to package signal-desktop (https://bugs.debian.org/842943)
It would allow us to simply depend on node-sqlite3 and not the forked https://github.com/scottnonnenberg-signal/node-sqlcipher

Test with:

cat > a.js <<EOT
var sqlite3 = require('sqlite3').verbose();
var db = new sqlite3.Database('test.db');
db.serialize(function() {
   db.run("PRAGMA key = 'mysecret'");
   db.run("CREATE TABLE lorem (info TEXT)");
   var stmt = db.prepare("INSERT INTO lorem VALUES (?)");
   for (var i = 0; i < 10; i++) {
       stmt.run("Ipsum " + i);
   }
   stmt.finalize();
   db.each("SELECT rowid AS id, info FROM lorem", function(err, row) {
       console.log(row.id + ": " + row.info);
   });
});
db.close();
EOT

nodejs a.js

hexdump -C test.db

you should not see the test data "Ipsum ..."

Paolo

-- System Information:
Debian Release: buster/sid
   APT prefers testing
   APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-2-amd64 (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages node-sqlite3 depends on:
ii  libc6         2.28-7
ii  libgcc1       1:8.2.0-21
ii  libnode64     10.15.1~dfsg-5
ii  libsqlite3-0  3.26.0+fossilbc891ac6b-2
ii  libstdc++6    8.2.0-21
ii  node-pre-gyp  0.10.2-3
ii  nodejs        10.15.1~dfsg-5

node-sqlite3 recommends no packages.

node-sqlite3 suggests no packages.

-- no debconf information