Re: Dependency on python-oauth2

2014-02-10 Thread Iain R. Learmonth
On 10/02/14 05:57, Thomas Goirand wrote: On 02/10/2014 02:41 AM, Iain R. Learmonth wrote: [...] python-oauth2 is indeed not maintained anymore upstream, and has security problems. As a consequence, I worked out a patch for keystone so that it uses oauthlib instead. I would recommend that

Re: Dependency on python-oauth2

2014-02-10 Thread Barry Warsaw
On Feb 10, 2014, at 10:33 AM, Iain R. Learmonth wrote: Cool. Thanks everyone for your help. I'm going to ask upstream if they'll consider moving to oauthlib then instead of python-oauth2. Thanks for that. I've ported a number of libraries and apps to oauthlib, and had a chance to speak with the

Dependency on python-oauth2

2014-02-09 Thread Iain R. Learmonth
Hi, I am attempting to get a package into Debian. I have it packaged and accepted into unstable but due to a dependency on python-oauth2 it has been held back from entering testing. https://security-tracker.debian.org/tracker/source-package/python-oauth2 There are two open security problems

Re: Dependency on python-oauth2

2014-02-09 Thread Daniele Tricoli
Hello Iain, On Sunday 09 February 2014 18:41:10 Iain R. Learmonth wrote: If there is no effort to fix these bugs, could someone recommend an alternative package to depend on to provide OAuth2 client functionality for a Python module? You could try python-oauthlib. Upstream is very active and

Re: Dependency on python-oauth2

2014-02-09 Thread Thomas Goirand
On 02/10/2014 02:41 AM, Iain R. Learmonth wrote: Hi, I am attempting to get a package into Debian. I have it packaged and accepted into unstable but due to a dependency on python-oauth2 it has been held back from entering testing. https://security-tracker.debian.org/tracker/source-package