On 03/16/2010 05:05 PM, mike castleman wrote:
> The traditional use of monkeysphere is to authenticate SSH connections;
> however, with the introduction of the msva[1] into Debian, it can also
> be used to authenticate HTTPS connections. So openssh-client should not
> be required anymore. Perhaps it should be recommended or suggested.

openssh-client provides ssh-keygen, which monkeysphere and
monkeysphere-host both use for fingerprinting keys.  (Other ssh
components are used in the ssh-proxycommand and update-known_hosts
subcommands, but those could reasonably fail with an informative error
message if openssh-client were not installed).

While it would be nice to move them to a Recommends, i don't think it's
feasible because of the use of ssh-keygen at the moment.  Maybe we
should to a simple replacement for that in our perl shim?

Seems like this might be worth filing as an upstream ticket as well,
since a change like that it would affect other distributions too.

> Also, I don't know what that procmail dependency is doing there, and
> maybe I don't want to know.

It's for lockfile; the dependency is actually lockfile-progs | procmail.
 you probably already had procmail on your system, so apt didn't bother
with lockfile-progs.

        --dkg

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to