[pkg-php-pear] Crypt_Blowfish conflict between PEAR and phpseclib

[David Prévot]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I recently packaged phpseclib [1] as an ownCloud dependency (since it’s
also provided as a PEAR channel [2], I’m considering packaging the 17
packages individually instead of the currently “bloated” php-seclib. If
you think this is a good idea, I’ll start with pear-phpseclib-channel
soon).

The problem with its last release (0.3.5), is a “new” Crypt_Blowfish
package that conflicts with the PEAR one, already packaged in Debian as
php-crypt-blowfish.

I’m not yet sure upstream can be convinced to change the (package and
files) name [3] (but please, do not pressure them as I believe the best
way to sort things through is via civil discussion and technical
arguments rather than flooding).

As a temporary workaround, I intend to rename the conflicted
/usr/share/php/Crypt/Blowfish.php file as Blowfish-phpseclib.php [4],
does that sound acceptable for the time being? Do you have a more proper
temporary (or medium term) idea to address this conflict (Conflicted
packages is not an option as owncloud already depends on
php-crypt-blowfish)?

Do you have any advice to address the long term issue? (I haven’t yet
tried to check if the two Crypt_Blowfish are compliant, but I doubt it
was initially designed to offer the existing features.)

> 	1: http://anonscm.debian.org/gitweb/?p=pkg-php/phpseclib.git
> 	2: http://phpseclib.sourceforge.net/pear.htm
> 	3: https://github.com/phpseclib/phpseclib/issues/125#issuecomment-20232376
> 	4: http://anonscm.debian.org/gitweb/?p=pkg-php/phpseclib.git;a=commitdiff;h=668aa48c65c7bab9e75c2e34afdf817f8f2391a5

Thanks in advance for your enlightenments

Regards

David

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJRzxOKAAoJEAWMHPlE9r08RIoH/RCf+7JAxzGjZYj2bmIFtiBt
45VSF344LJ3FM07Ec8m8wp0YhWcraXpUq+FbzpzFVwo8gxecpNFkO89sKEzGktu8
EdRaOOcBQBmhtu9n2jXH3C8cx94PK2reGxeB8FeQ6QUa9YrLneErQPt06BuPo+ya
/SYb026s3+Izv4BvAOXZl0coMIteLPtdwAOOA1qtobKltl/GRiRcIQmzSSTvFFWc
7MzcLNZWOIgl5ohDTN5434I/WINTmU/kqwpBHlNbhSqhZpWNJ2eXwA1Ufl+mlE33
G+7wbamM1uxqNvsjTrOMGaoXz1wC36tVOYCKbzACy7gfwR1gtUAWd2gM6kKaZGE=
=7aUr
-----END PGP SIGNATURE-----