Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-29 Thread Ryan Schmidt
On May 24, 2022, at 15:31, Daniel J. Luke wrote: > On May 24, 2022, at 3:56 PM, Ryan Schmidt wrote: >> I wouldn't recommend anyone begin writing any code until it is discussed how >> the feature should work. That should avoid spending time writing code that >> won't work. > > sure, if someone

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-27 Thread Steven Smith
> On May 16, 2022, at 2:19 PM, Ryan Schmidt wrote: > > Whenever the curl-ca-bundle port is updated to a new version, the > privoxy-pki-bundle port's revision should be increased so that it rebuilds > with the new bundle. A comment can be added to the curl-ca-bundle port to > remind people to

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-24 Thread Daniel J. Luke
On May 24, 2022, at 3:56 PM, Ryan Schmidt wrote: > I wouldn't recommend anyone begin writing any code until it is discussed how > the feature should work. That should avoid spending time writing code that > won't work. sure, if someone were working on a feature it would be reasonable for them

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-24 Thread Ryan Schmidt
On May 24, 2022, at 14:08, Daniel J. Luke wrote: > On May 24, 2022, at 12:07 PM, Ryan Schmidt wrote: >> I'm not convinced that I would be happy to see such a feature. Just a >> moment's consideration shows how many different parts of MacPorts would need >> modifications to support it, not only

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-24 Thread Daniel J. Luke
On May 24, 2022, at 12:07 PM, Ryan Schmidt wrote: > I'm not convinced that I would be happy to see such a feature. Just a > moment's consideration shows how many different parts of MacPorts would need > modifications to support it, not only in base but also in the buildbot and in > the package

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-24 Thread Ryan Schmidt
On May 24, 2022, at 09:35, Daniel J. Luke wrote: > - MacPorts could grow a feature by which a port could specify that it needs > to get rebuilt if something it depends on gets rebuilt (this would probably > require another identifier along with epoch-version-revision or would require > some

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-24 Thread Daniel J. Luke
On May 23, 2022, at 4:59 PM, Steven Smith wrote: >> What has changed between the time that the buildbot built the package and >> the time that the user installs it? > > The certs in curl-ca-bundle are updated regularly to clear out expired certs. Does the existence of expired certs cause

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Ryan Schmidt
On May 23, 2022, at 18:35, Jim DeLaHunt wrote: > 1. port curl-ca-bundle is a subport of port curl[2], > 2. it looks to me like port curl-ca-bundle only got updated about 7 times in > the last 43 months[3] > 3. it looks as if port curl-ca-bundle updates a file within curl, >

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Ryan Schmidt
On May 23, 2022, at 21:16, Chris Jones wrote: > On 23 May 2022, at 9:59 pm, Steven Smith wrote: >  >>> What has changed between the time that the buildbot built the package and >>> the time that the user installs it? >> >> The certs in curl-ca-bundle are updated regularly to clear out expired

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Chris Jones
> On 23 May 2022, at 9:59 pm, Steven Smith wrote: > >  >> >> What has changed between the time that the buildbot built the package and >> the time that the user installs it? > > The certs in curl-ca-bundle are updated regularly to clear out expired certs. > > Per the previous discussion,

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Jim DeLaHunt
On 2022-05-23 13:59, Steven Smith wrote: ... The certs in curl-ca-bundle are updated regularly to clear out expired certs. ...> The “solution” appears to be to bump the revision of privoxy-pki-bundle by hand whenever curl-ca-bundle is updated And how often is port curl-ca-bundle updated?

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Steven Smith
> What has changed between the time that the buildbot built the package and the > time that the user installs it? The certs in curl-ca-bundle are updated regularly to clear out expired certs. Per the previous discussion, privoxy-pki-bundle uses these certs via a depends_lib, and unless a port

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-23 Thread Ryan Schmidt
On May 22, 2022, at 13:43, Steven Smith wrote: > A standard install command grabs pre-built stuff from > https://packages.macports.org/privoxy-pki-bundle. This pre-built stuff is > inevitably stale because it inevitably contains expired certs. Again, why is it the case that what we built on

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-22 Thread Daniel J. Luke
On May 22, 2022, at 2:43 PM, Steven Smith wrote: > A standard install command grabs pre-built stuff from > https://packages.macports.org/privoxy-pki-bundle. This pre-built stuff is > inevitably stale because it inevitably contains expired certs. We want to > port to install stuff, just not

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-22 Thread Steven Smith
A standard install command grabs pre-built stuff from https://packages.macports.org/privoxy-pki-bundle . This pre-built stuff is inevitably stale because it inevitably contains expired certs. We want to port to install stuff, just not pre-built

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-22 Thread Ryan Schmidt
On May 21, 2022, at 12:40, Steven Smith wrote: > Is there a way to achieve the second objective: prevent MacPorts from > building and caching its own copy of the port contents, which for this port > will inevitably be filled with expired certificates? > > Right now, avoiding this issue

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-21 Thread Steven Smith
Thank you for the helpful answers. Is there a way to achieve the second objective: prevent MacPorts from building and caching its own copy of the port contents, which for this port will inevitably be filled with expired certificates? Right now, avoiding this issue requires installing the port

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-19 Thread Daniel J. Luke
On May 17, 2022, at 4:31 PM, Steven Smith wrote: >> Whenever the curl-ca-bundle port is updated to a new version, the >> privoxy-pki-bundle port's revision should be increased so that it rebuilds >> with the new bundle. > > Thank you. > > This is the part that I was hoping is automatic,

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-17 Thread Ryan Schmidt
On May 17, 2022, at 15:31, Steven Smith wrote: >> Whenever the curl-ca-bundle port is updated to a new version, the >> privoxy-pki-bundle port's revision should be increased so that it rebuilds >> with the new bundle. > > > Thank you. > > This is the part that I was hoping is automatic,

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-17 Thread Steven Smith
> Whenever the curl-ca-bundle port is updated to a new version, the > privoxy-pki-bundle port's revision should be increased so that it rebuilds > with the new bundle. Thank you. This is the part that I was hoping is automatic, without updating a revision: the depends_lib would see that the

Re: privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-16 Thread Ryan Schmidt
On May 12, 2022, at 18:04, Steven Smith wrote: > > I tried to write privoxy-pki-bundle to have these two basic behaviors: > > • Updates to the file ${prefix}/share/curl/curl-ca-bundle.crt via port > curl-ca-bundle will force reinstallation of the CA file >

privoxy-pki-bundle not Behaving as Desired – Request for Assistance

2022-05-12 Thread Steven Smith
I tried to write privoxy-pki-bundle to have these two basic behaviors: Updates to the file ${prefix}/share/curl/curl-ca-bundle.crt via port curl-ca-bundle will force reinstallation of the CA file ${prefix}/etc/privoxy/CA/trustedCAs.pem with the new CAs. port install privoxy-pki-bundle will