Well, if a user has both Universe and Main enabled, if we have a
openssl-sslv2, which is the same package expect with SSLv2 compiled in, all
it needs is a Replaces/Conflicts/Provides which removes the sslv3-only
package.

That way, any users who need it (and those who need likely already know) are
simply an aptitiude command away from having the necessary support.

On Tue, Jul 22, 2008 at 9:43 AM, Ante Karamatic <[EMAIL PROTECTED]> wrote:

> On Tue, 22 Jul 2008 08:22:13 -0500
> "Dustin Kirkland" <[EMAIL PROTECTED]> wrote:
>
> > And as soon as we get to the point where no packages depend on that,
> > we remove it?
>
> Our packages shouldn't be the problem (I doubt we have sslv2-only
> clients or servers). If there are problematic packages, then by
> definition those problems are bugs.
>
> Problems are third party packages, like XYZ IMAP client from ABCD
> company which supports only SSLv2 (I'm not aware of any program like
> that, but you get my point). For sysadmins of servers which have
> clients like that, openssl with SSLv2 is must have.
>
> I like the idea of additional package in universe. But how much
> problems could that produce?
>
> --
> ubuntu-devel mailing list
> [EMAIL PROTECTED]
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
>
-- 
ubuntu-server mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Reply via email to