Re: salsa.debian.net

2017-08-20 Thread Joerg Jaspert
On 14771 March 1977, Florian Weimer wrote: > I received some key SSH import notices from salsa.debian.net, but I > didn't request anything. > Is this harmless, or is something fishy going on? Harmless, sorry. Salvatore guessed right, and the mails had been a mistake at that point. -- bye, Joer

Bug#872773: ITP: firefox-passff -- pass manager extension for Firefox

2017-08-20 Thread 魏銘廷
Package: wnpp Severity: wishlist Owner: =?utf-8?b?WWFvIFdlaSAo6a2P6YqY5bu3KQ==?= -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 * Package name: passff Version : 1.0.0 Upstream Author : Nathan Wallace * URL : http://github.com/passff/passff * License : GPL-2.

Re: salsa.debian.net

2017-08-20 Thread Salvatore Bonaccorso
Hi Florian, On Mon, Aug 21, 2017 at 06:50:06AM +0200, Florian Weimer wrote: > I received some key SSH import notices from salsa.debian.net, but I > didn't request anything. > > Is this harmless, or is something fishy going on? It looks this is the new collaboration server in replacement to aliot

salsa.debian.net

2017-08-20 Thread Florian Weimer
I received some key SSH import notices from salsa.debian.net, but I didn't request anything. Is this harmless, or is something fishy going on?

Bug#872763: node-clean-yaml-object

2017-08-20 Thread Bastien ROUCARIES
Package: wnpp Severity: wishlist Owner: ro...@debian.org X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-clean-yaml-object Version : 0.1.0 Upstream Author : James Talmage (github.com/jamestalmage) * URL : https://github.com/tapjs/clean-yaml-object#read

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-20 Thread Martin Zobel-Helas
Hi, On Sun Aug 20, 2017 at 21:54:12 +0200, Michael Meskes wrote: > >> It'd be nice if, after all this discussion, you stated clearly whether > >> you plan to change something or not. > > > > Isn't that what I just did? > > No, not exactly. You stated what you want to do in *Buster*, but not > w

Bug#845789: ITP: spymemcached -- simple, asynchronous, single-threaded memcached client written in java

2017-08-20 Thread Christopher Hoskin
Package: wnpp Followup-For: Bug #845789 Owner: Christopher Hoskin Work in progress here: https://anonscm.debian.org/cgit/pkg-java/spymemcached.git/ Christopher Hoskin

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Jonas Smedegaard
Quoting Hanno Rince' Wagner (2017-08-20 22:01:51) > On Fri, 18 Aug 2017, Tollef Fog Heen wrote: > > > I think you're wrong on this point, having Debian make this change makes > > it a lot easier for me to go to company management and explain that TLS > > v1.2 is the only way forward and that we ne

Re: Single Sign On for Debian

2017-08-20 Thread Marcin Kulisz
On 2017-08-20 16:28:05, Luca Filipozzi wrote: > As expressed during the DC17 DSA and Cloud BoFs, I'm in favour of two > related but orthogonal things: > 1 collapsing user management into a single user store (LDAP)** > 2 introducing SAML or OIDC IdPs so that we can tie into AWS, Azure, and > GCP S

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-20 Thread Michael Meskes
>> It'd be nice if, after all this discussion, you stated clearly whether >> you plan to change something or not. > > Isn't that what I just did? No, not exactly. You stated what you want to do in *Buster*, but not whether it's supposed to stay broken all the way until then. I guess this email of

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-20 Thread Kurt Roeckx
On Sun, Aug 20, 2017 at 09:14:47PM +0200, Michael Meskes wrote: > > I might upload this soon. The intention is still to ship Buster > > with TLS 1.0 and 1.1 completly disabled. > > Disabled by configuration or disabled by not compiling it in? With "completly disabled" I mean at build time. > It'

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-20 Thread Michael Meskes
> I might upload this soon. The intention is still to ship Buster > with TLS 1.0 and 1.1 completly disabled. Disabled by configuration or disabled by not compiling it in? It'd be nice if, after all this discussion, you stated clearly whether you plan to change something or not. Meaning, will we g

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Michael Meskes
> pretty poor choice. Providing people with the possibility to fall back > to less secure solutions sounds like a much better choice, just like Problem is, where is this possibility right now? Michael -- Michael Meskes Michael at Fam-Meskes dot De, Michael at Meskes dot (De|Com|Net|Org) Meskes

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-20 Thread Kurt Roeckx
On Mon, Aug 07, 2017 at 08:35:52PM +0200, Kurt Roeckx wrote: > On Mon, Aug 07, 2017 at 05:22:51PM +0200, Joerg Jaspert wrote: > > I wonder if there is a middle way that ensures that all new stuff does > > go TLS1.2 (or later, whenever), but does allow older stuff still to > > work. Which isnt the c

Re: New archive key for wheezy generated

2017-08-20 Thread Paul Wise
2017-08-16 5:15 GMT-04:00 bogdan: > My name is bogdan .i need help. Please contact Debian user support for help: https://www.debian.org/support -- bye, pabs https://wiki.debian.org/PaulWise

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Wouter Verhelst
On Sun, Aug 20, 2017 at 01:51:16PM +0200, Tollef Fog Heen wrote: > Arguing for keeping TLS 1.0 support means you're arguing for providing > users with a default-insecure setup. No. Arguing for keeping TLS1.0 *enabled by default* does. But arguing for *allowing* it to be re-enabled (without requir

Bug#869908: relax dependency on faraday in gemspec

2017-08-20 Thread Sebastien Badia
On Fri, Aug 18, 2017 at 07:50:44PM (+0530), Pirate Praveen wrote: > ruby-faraday-middleware 0.12.2-1 just uploaded to unstable. Thanks!! Seb signature.asc Description: PGP signature

Re: Single Sign On for Debian

2017-08-20 Thread Luca Filipozzi
On Sun, Aug 20, 2017 at 06:16:07PM +0200, Geert Stappers wrote: > > Previous on mailinglist > alioth-staff-replacem...@lists.alioth.debian.org > > IMHO is debian-devel@lists.debian.org a better place for this. > > > - Forwarded message from Enrico Zini - > > Date: Sun, 20 Aug 2017 18:

Single Sign On for Debian

2017-08-20 Thread Geert Stappers
Previous on mailinglist alioth-staff-replacem...@lists.alioth.debian.org IMHO is debian-devel@lists.debian.org a better place for this. - Forwarded message from Enrico Zini - Date: Sun, 20 Aug 2017 18:03:26 +0200 From: Enrico Zini To: alioth-staff-replacem...@lists.alioth.debian.org

Bug#872733: ITP: wildfly-client-config -- Wildfly Client Configuration Library

2017-08-20 Thread Markus Koschany
Package: wnpp Severity: wishlist Owner: Markus Koschany * Package name: wildfly-client-config Version : 1.0.0 Upstream Author : Red Hat Inc. * URL : http://wildfly.org/ * License : Apache-2.0 Programming Lang: Java Description : Wildfly Client Configura

Bug#872732: ITP: wildfly-common -- Wildfly common utilities project

2017-08-20 Thread Markus Koschany
Package: wnpp Severity: wishlist Owner: Markus Koschany * Package name: wildfly-common Version : 1.2.0 Upstream Author : Red Hat Inc. * URL : http://wildfly.org/ * License : Apache-2.0 Programming Lang: Java Description : Wildfly common utilities projec

Re: Call for volunteers: FTP Team

2017-08-20 Thread Chris Lamb
Hi Andreas, > What is IMHO really true is that all answers in the thread while being > mostly funny and entertaining have not revealed any volunteer for the > team that was rather asking for man power than for name suggestions. I share your frustration. However, you will be heartened to learn tha

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Adrian Bunk
On Sun, Aug 20, 2017 at 01:51:16PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk >... > > Think of the "TLS 1.2 not working with WPA" discussed earlier here that > > might still affect half a billion active Android devices at the buster > > release date.[1] > > > > The online banking app runnin

Bug#872722: ITP: node-foreground-child -- : helper for running a child process as a foreground process

2017-08-20 Thread Bastien ROUCARIES
Package: wnpp Severity: wishlist Owner: ro...@debian.org X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-foreground-child Version : 1.5.6 Upstream Author : Isaac Z. Schlueter (http://blog.izs.me/) * URL : https://github.com/tapjs/foreground-child#readm

Re: Call for volunteers: FTP Team

2017-08-20 Thread Andreas Tille
On Fri, Aug 18, 2017 at 07:16:38PM +0500, Andrey Rahmatullin wrote: > Several mails in this thread seem to assume that the main or even the only > job of the ftp team is processing the NEW queue. This is not true. What is IMHO really true is that all answers in the thread while being mostly funny

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Tollef Fog Heen
]] Adrian Bunk > On Fri, Aug 18, 2017 at 10:07:49PM +0200, Tollef Fog Heen wrote: > > ]] Adrian Bunk > >... > > The PCI consortium extended the deadline until June > > 2018. Assuming that deadline holds, people with older machines will not > > be able to access services such as online banking

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Sven Hartge
Adrian Bunk wrote: > [1] I haven't investigated how widespread this specific problem > actually is, or whether it can be mitigated - the point is that > it is unrelated to TLS versions supported by PayPal or online > banking apps running on the device I asked on the freeradius-user

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Adrian Bunk
On Fri, Aug 18, 2017 at 10:07:49PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk >... > The PCI consortium extended the deadline until June > 2018. Assuming that deadline holds, people with older machines will not > be able to access services such as online banking or pay online in > general.

Bug#872697: ITP: node-unicode-10.0.0 -- Unicode data for Node.js

2017-08-20 Thread Julien Puydt
Package: wnpp Severity: wishlist Owner: Julien Puydt X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-unicode-10.0.0 Version : 0.7.4 Upstream Author : Mathias Bynens (https://mathiasbynens.be/) * URL : https://github.com/mathiasbynens/unicode-10.0.0 * L

Bug#872695: ITP: caja-admin -- Add administrative actions to Caja's right-click menu

2017-08-20 Thread Mike Gabriel
Package: wnpp Severity: wishlist Owner: Mike Gabriel * Package name: caja-admin Version : 0.0.1 Upstream Author : Sander Sweers * URL : https://github.com/infirit/caja-admin * License : GPL-3+ Programming Lang: Python Description : Add administrative a