On Thu, Jul 28, 2016 at 07:49:07PM -0400, Peter Colberg wrote: > On Thu, Jul 28, 2016 at 04:34:16PM -0700, Josh Triplett wrote: > > On Thu, Jul 28, 2016 at 06:36:58PM -0400, Peter Colberg wrote: > > > I am suggesting to provide two variants of libgit2, without and with > > > support for https://, with the latter linking to OpenSSL, similar to > > > the multiple variants of libcurl. > > > > > > https://bugs.debian.org/832798 > > > > That would be a maintenance pain, and it would still mean that GPLed > > applications couldn't use libgit2 with https URLs. (It might work as a > > temporary solution, but it doesn't seem like the right long-term > > solution.) > > The julia maintainers have proposed to libgit2 upstream to support > mbedTLS [1] as an alternative. That is a long-term solution however > that will take another year to ship in the form of julia 0.6.0.
I don't think it'd take a year to do this. If libgit2 upstream added support for a new TLS transport, I'd be happy to help get the new upstream version of libgit2 packaged for Debian right away. I already need the latest upstream version for another project. - Josh Triplett
