[pkg-php-pear] Crypt_Blowfish conflict between PEAR and phpseclib

[Mathieu Parent]

2013/6/29 David Prévot <david at tilapin.org>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Hi,
>
> I recently packaged phpseclib [1] as an ownCloud dependency (since it’s
> also provided as a PEAR channel [2], I’m considering packaging the 17
> packages individually instead of the currently “bloated” php-seclib. If
> you think this is a good idea, I’ll start with pear-phpseclib-channel
> soon).
>
> The problem with its last release (0.3.5), is a “new” Crypt_Blowfish
> package that conflicts with the PEAR one, already packaged in Debian as
> php-crypt-blowfish.
>
> I’m not yet sure upstream can be convinced to change the (package and
> files) name [3] (but please, do not pressure them as I believe the best
> way to sort things through is via civil discussion and technical
> arguments rather than flooding).
>
> As a temporary workaround, I intend to rename the conflicted
> /usr/share/php/Crypt/Blowfish.php file as Blowfish-phpseclib.php [4],
> does that sound acceptable for the time being? Do you have a more proper
> temporary (or medium term) idea to address this conflict (Conflicted
> packages is not an option as owncloud already depends on
> php-crypt-blowfish)?
>
> Do you have any advice to address the long term issue? (I haven’t yet
> tried to check if the two Crypt_Blowfish are compliant, but I doubt it
> was initially designed to offer the existing features.)

I packaged php-crypt-blowfish because it was a Horde dependency at
that time. They now use there own implementation
(php-horde-crypt-blowfish). As php-crypt-blowfish doesn't have any
rdepends, it may be removed.

Also, is there any link between PEAR's Crypt_Blowfish and Owncloud
one? is this a fork, with compatible API? A quick read suggests that
it is compatible
(http://pear.php.net/package/Crypt_Blowfish/docs/latest/Crypt_Blowfish/Crypt_Blowfish.html).

Also, for the binary package name, ask pkg-php-tools. This will probably be:
php-phpseclib-sourceforge-crypt-blowfish.

Which is not very good (read dh_pear manpage about overrides).




>>       1: http://anonscm.debian.org/gitweb/?p=pkg-php/phpseclib.git
>>       2: http://phpseclib.sourceforge.net/pear.htm
>>       3: https://github.com/phpseclib/phpseclib/issues/125#issuecomment-20232376
>>       4: http://anonscm.debian.org/gitweb/?p=pkg-php/phpseclib.git;a=commitdiff;h=668aa48c65c7bab9e75c2e34afdf817f8f2391a5
>
> Thanks in advance for your enlightenments
>
> Regards
>
> David

--
Mathieu