Le 12/09/2024 à 07:29, Helmut Grohne a écrit :
Source: python-gear
Severity: important
User: helm...@debian.org
Usertags: sidremove
Dear maintainer,
I suggest removing python-gear from Debian for the following reasons:
* It accumulated one RC-bug:
+ #1002430: python-gear: FTBFS: ssl.SSLError: [SSL: NO_CIPHERS_AVAILABLE]
no ciphers available (_ssl.c:997)
Last modified: 1 year, 3 months
CC #1002430 which has the build failure
python-gear packages upstream version 0.5.8 which was released in 2015.
I packaged it (along python-voluptuous) because our sysadmins at the
time required to deploy using Debian packages. Shortly after we changed
to our model to vendor the dependencies and I have never looked back at
the Debian package.
#1002430 shows an issue with the SSL configuration and after a quick
look at the git log in https://review.opendev.org/opendev/gear , there
are multiple commits referring to SSL/TSL config. It is thus most
probably fixed upstream.
I guess the default nowadays on Python 3.10 requires an explicit
configuration for which ciphers can be used, hence the FTBS.
* It is not part of bookworm or trixie and is not a key package.
Given the package is not used and hasn't caught up with nearly ten years
of releases, I don't think there is any point in spending anymore time
on it. Please start the process to have it removed and close all the
related bugs that got filed (if any).
cheers,
--
Antoine "hashar" Musso
