Bug#1055116: rust-rustls, please prepare update for new ring.
Quoting Peter Green (2023-11-07 11:59:32) > On 02/11/2023 05:51, Jonas Smedegaard wrote: > > > >>> That's wonderful news. > >>> > >>> I am happy to update rust-rustls, as soon as possible. Seems to only > >>> blocker is an transitive dependency on rust-rcgen needing an update as > >>> well: See bug#1055132. > > The package rust-sct needs relinking as well. > Thanks for preparing the updates, I think we are now ready to move > on this in unstable, afaict the following steps are needed. > > 1. re-upload the new untrusted, ring, rcgen and sct packages to unstable. > 2. re-upload the new rustls-webpki and rustls packages to unstable > 3. re-upload the remaining rust team packages that depend on ring to unstable. > 4. upload a version of rust-rustls-native-certs with updated dev-dependencies > (less critical, but needed to avoid rust-rustls-native-certs becoming rc > buggy and may also be needed for testing migration) > > To minimise the time things are broken in unstable are you ok if I > perform step 2 (and maybe also step 4) as a NMU? Looks good to me. Yes, I am fine with you zero-day NMUing here. Thanks! I am not convinced that step 4 is really needed, but that is not important to me - i.e. if you consider it important then feel free to zero-day NMU for that as well - then I guess I can simply revert to relax dependencies when I get around to revisiting the packages later. So you only need to elaborate on your reasoning for step 4 if you think I might cause damage by later relaxing. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#1055116: rust-rustls, please prepare update for new ring.
On 02/11/2023 05:51, Jonas Smedegaard wrote: That's wonderful news. I am happy to update rust-rustls, as soon as possible. Seems to only blocker is an transitive dependency on rust-rcgen needing an update as well: See bug#1055132. The package rust-sct needs relinking as well. Thanks for preparing the updates, I think we are now ready to move on this in unstable, afaict the following steps are needed. 1. re-upload the new untrusted, ring, rcgen and sct packages to unstable. 2. re-upload the new rustls-webpki and rustls packages to unstable 3. re-upload the remaining rust team packages that depend on ring to unstable. 4. upload a version of rust-rustls-native-certs with updated dev-dependencies (less critical, but needed to avoid rust-rustls-native-certs becoming rc buggy and may also be needed for testing migration) To minimise the time things are broken in unstable are you ok if I perform step 2 (and maybe also step 4) as a NMU?
Bug#1055116: rust-rustls, please prepare update for new ring.
Control: block -1 by 1055202 Quoting Jonas Smedegaard (2023-11-01 11:55:39) > Quoting Jonas Smedegaard (2023-11-01 01:51:39) > > Quoting Peter Green (2023-10-31 19:33:29) > > > Package: rust-rustls > > > > > > After a long wait, ring released version 0.17 which is far more portable > > > than > > > previous versions. The lack of portability of ring has been a thorn in the > > > side of the rust team for some time so we would really like to upgrade. > > > > > > The good news is that rustls has updated to the new version of ring > > > *without* > > > bumping semver. So hopefully this transition can be kept relatively small. > > > > > > I've uploaded the new version of ring to experimental, could you prepare > > > new > > > versions of the rustls packages to work with it. > > > > That's wonderful news. > > > > I am happy to update rust-rustls, as soon as possible. Seems to only > > blocker is an transitive dependency on rust-rcgen needing an update as > > well: See bug#1055132. The package rust-sct needs relinking as well. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#1055116: rust-rustls, please prepare update for new ring.
Control: block -1 by 1055148 Quoting Jonas Smedegaard (2023-11-01 01:51:39) > Control: block -1 by 1055132 > > Quoting Peter Green (2023-10-31 19:33:29) > > Package: rust-rustls > > > > After a long wait, ring released version 0.17 which is far more portable > > than > > previous versions. The lack of portability of ring has been a thorn in the > > side of the rust team for some time so we would really like to upgrade. > > > > The good news is that rustls has updated to the new version of ring > > *without* > > bumping semver. So hopefully this transition can be kept relatively small. > > > > I've uploaded the new version of ring to experimental, could you prepare new > > versions of the rustls packages to work with it. > > That's wonderful news. > > I am happy to update rust-rustls, as soon as possible. Seems to only > blocker is an transitive dependency on rust-rcgen needing an update as > well: See bug#1055132. Sorry, I thought it was obvious so I failed to spell it out explicitly: For rust-rustls to link against rust-ring 0.17, rust-rustls-webpki needs updating to also link against rust-ring 0.17, which in turn requires rust-rcgen to also link against rust-ring 0.17. So no, releasing rust-rcgen patched to *not* upgrade its linkage is *not* helping here, so really I wasted everyones time by filing bug#1055132, when in fact this does *not* need some version number, it needs some linkage that upstream is represented by that version number but is distorted in Debian patching-rich Rust packaging). Hope that helps. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#1055116: rust-rustls, please prepare update for new ring.
Control: block -1 by 1055132 Quoting Peter Green (2023-10-31 19:33:29) > Package: rust-rustls > > After a long wait, ring released version 0.17 which is far more portable than > previous versions. The lack of portability of ring has been a thorn in the > side of the rust team for some time so we would really like to upgrade. > > The good news is that rustls has updated to the new version of ring *without* > bumping semver. So hopefully this transition can be kept relatively small. > > I've uploaded the new version of ring to experimental, could you prepare new > versions of the rustls packages to work with it. That's wonderful news. I am happy to update rust-rustls, as soon as possible. Seems to only blocker is an transitive dependency on rust-rcgen needing an update as well: See bug#1055132. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ * Sponsorship: https://ko-fi.com/drjones [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: signature
Bug#1055116: rust-rustls, please prepare update for new ring.
Package: rust-rustls After a long wait, ring released version 0.17 which is far more portable than previous versions. The lack of portability of ring has been a thorn in the side of the rust team for some time so we would really like to upgrade. The good news is that rustls has updated to the new version of ring *without* bumping semver. So hopefully this transition can be kept relatively small. I've uploaded the new version of ring to experimental, could you prepare new versions of the rustls packages to work with it.
