On Thu, Jul 28, 2016 at 10:45:18PM -0400, Peter Colberg wrote: > On Thu, Jul 28, 2016 at 05:21:59PM -0700, Josh Triplett wrote: > > On Thu, Jul 28, 2016 at 07:49:07PM -0400, Peter Colberg wrote: > > > The julia maintainers have proposed to libgit2 upstream to support > > > mbedTLS [1] as an alternative. That is a long-term solution however > > > that will take another year to ship in the form of julia 0.6.0. > > > > I don't think it'd take a year to do this. If libgit2 upstream added > > support for a new TLS transport, I'd be happy to help get the new > > upstream version of libgit2 packaged for Debian right away. I already > > need the latest upstream version for another project. > > My estimate was based on this comment [1], which refers to a solution > using MbedTLS as a custom TLS stream with libgit2 [2, 3]. This was(?) > planned for julia 0.6.0, which could indeed take a year until release. > > Transparently supporting MbedTLS in upstream libgit2 [4] seems a much > better solution and will work with julia 0.5.0 out of the box. Thanks > for advocating this proposal to the upstream maintainer.
If you're interested in that approach, it would probably help to download and test the patches, and perhaps clean them up a bit. - Josh Triplett

