Debian Bug report logs - #543150
RFP: pdkim -- cryptographically identify the sender of email

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: Magnus Holmgren <holmgren@debian.org>

Date: Sat, 22 Aug 2009 21:06:02 UTC

Severity: wishlist

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, debian-devel@lists.debian.org, <wnpp@debian.org>:
Bug#543150; Package wnpp. (Sat, 22 Aug 2009 21:06:05 GMT) Full text and rfc822 format available.

Acknowledgement sent to Magnus Holmgren <holmgren@debian.org>:
New Bug report received and forwarded. Copy sent to debian-devel@lists.debian.org, <wnpp@debian.org>. (Sat, 22 Aug 2009 21:06:05 GMT) Full text and rfc822 format available.

Message #5 received at submit@bugs.debian.org (full text, mbox):

From: Magnus Holmgren <holmgren@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: ITP: pdkim -- cryptographically identify the sender of email
Date: Sat, 22 Aug 2009 22:53:30 +0200
Package: wnpp
Severity: wishlist
Owner: Magnus Holmgren <holmgren@debian.org>

* Package name    : pdkim
  Version         : 1.0
  Upstream Author : Tom Kistner <tom@duncanthrax.net>
* URL             : http://duncanthrax.net/pdkim/
* License         : GPL
  Programming Lang: C
  Description     : cryptographically identify the sender of email

PDKIM is another DKIM (RFC4871) library written by Tom Kistner because libdkim was lacking some functionality needed in Exim and the developers are unresponsive.

Its main virtues are:

    * Self-contained, no dependencies (except libc), thanks to code included from the PolarSSL project.
    * Cross-Platform. Works on Unix™ and Windows™.
    * Straightforward API
    * Small size
    * GPL license




Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>, Magnus Holmgren <holmgren@debian.org>:
Bug#543150; Package wnpp. (Sat, 22 Aug 2009 22:09:17 GMT) Full text and rfc822 format available.

Acknowledgement sent to ucko@debian.org (Aaron M. Ucko):
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>, Magnus Holmgren <holmgren@debian.org>. (Sat, 22 Aug 2009 22:09:17 GMT) Full text and rfc822 format available.

Message #10 received at 543150@bugs.debian.org (full text, mbox):

From: ucko@debian.org (Aaron M. Ucko)
To: Magnus Holmgren <holmgren@debian.org>
Cc: 543150@bugs.debian.org, debian-devel@lists.debian.org
Subject: Re: Bug#543150: ITP: pdkim -- cryptographically identify the sender of email
Date: Sat, 22 Aug 2009 17:58:51 -0400
Magnus Holmgren <holmgren@debian.org> writes:

>     * Self-contained, no dependencies (except libc), thanks to code included from the PolarSSL project.

From a Debian perspective, that's a policy violation, not a feature!
Please arrange for it to use an external PolarSSL installation.

-- 
Aaron M. Ucko, KB1CJC (amu at alum.mit.edu, ucko at debian.org)
http://www.mit.edu/~amu/ | http://stuff.mit.edu/cgi/finger/?amu@monk.mit.edu




Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>, Magnus Holmgren <holmgren@debian.org>:
Bug#543150; Package wnpp. (Mon, 24 Aug 2009 18:24:18 GMT) Full text and rfc822 format available.

Acknowledgement sent to Andreas Metzler <ametzler@downhill.at.eu.org>:
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>, Magnus Holmgren <holmgren@debian.org>. (Mon, 24 Aug 2009 18:24:18 GMT) Full text and rfc822 format available.

Message #15 received at 543150@bugs.debian.org (full text, mbox):

From: Andreas Metzler <ametzler@downhill.at.eu.org>
To: 543150@bugs.debian.org
Cc: debian-devel@lists.debian.org
Subject: Re: Bug#543150: ITP: pdkim -- cryptographically identify the sender of email
Date: Mon, 24 Aug 2009 20:16:29 +0200
On 2009-08-23 Magnus Holmgren <holmgren@debian.org> wrote:
> On lördagen den 22 augusti 2009, Aaron M. Ucko wrote:
>> Magnus Holmgren <holmgren@debian.org> writes:
>>>     * Self-contained, no dependencies (except libc), thanks to code
>>> included from the PolarSSL project.

>> From a Debian perspective, that's a policy violation, not a feature!

>> Please arrange for it to use an external PolarSSL installation.

> I know and agree and will talk to Tom about this. PolarSSL currently only 
> provides a static library however, which is also not good.

I am somehow also not happy with a situation where any given exim
installation would end linked dynamically (indirectly) against at least
two full blown ssl libraries (OpenSSL or GnuTLS for STARTTLS, polarssl
for DKIM).

On a sidenote, is the cause for this ITP just exim or is general
interest in this library?

> AFAICT pdkim "borrows" the code needed to implement DKIM (i.e. RSA, SHA-1 
> etc.),

Afaiui this "gnulib style" usage of polarssl by picking a handful of
files is supported upstream.
http://polarssl.org/?page=features
| All symmetric and hashing algorithms are not coupled to any other file
| and can thus be easily integrated into existing projects.

> but I haven't checked whether Tom has made any modifications to it.

pdkim.(c|h) is new code, all the rest is basically unmodified from
polarssl (stripped out selftest, disabled #include "polarssl/config.h"
+ check for #if defined(POLARSSL_....), except for rsa.(h|c).

The latter contains the two newly written functions
rsa_parse_public_key and rsa_parse_key which require asn1_get_tag and
asn1_get_mpi. Sadly these asn_... functions are not (yet?) part of
polarssl's public API.  (They are part of x509parse.c). Which is why
Tom has copied their sourcecode into rsa.(h|c).

I agree that all this should at least be separared clearly (like
gnulib/) in the pdkim distributions, be it just for easy updates.

cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'




Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>:
Bug#543150; Package wnpp. (Sat, 29 Aug 2009 08:54:03 GMT) Full text and rfc822 format available.

Acknowledgement sent to Magnus Holmgren <holmgren@debian.org>:
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>. (Sat, 29 Aug 2009 08:54:03 GMT) Full text and rfc822 format available.

Message #20 received at 543150@bugs.debian.org (full text, mbox):

From: Magnus Holmgren <holmgren@debian.org>
To: 543150@bugs.debian.org, debian-devel@lists.debian.org
Subject: Re: Bug#543150: ITP: pdkim -- cryptographically identify the sender of email
Date: Sat, 29 Aug 2009 10:29:42 +0200
[Message part 1 (text/plain, inline)]
On måndagen den 24 augusti 2009, Andreas Metzler wrote:
> On 2009-08-23 Magnus Holmgren <holmgren@debian.org> wrote:
> > On lördagen den 22 augusti 2009, Aaron M. Ucko wrote:
> >> Magnus Holmgren <holmgren@debian.org> writes:
> >>>     * Self-contained, no dependencies (except libc), thanks to code
> >>> included from the PolarSSL project.
> >>
> >> From a Debian perspective, that's a policy violation, not a feature!
> >>
> >> Please arrange for it to use an external PolarSSL installation.
> >
> > I know and agree and will talk to Tom about this. PolarSSL currently only
> > provides a static library however, which is also not good.
>
> I am somehow also not happy with a situation where any given exim
> installation would end linked dynamically (indirectly) against at least
> two full blown ssl libraries (OpenSSL or GnuTLS for STARTTLS, polarssl
> for DKIM).
>
> On a sidenote, is the cause for this ITP just exim or is general
> interest in this library?

Primarily for Exim. Also because I already maintain a couple of DKIM-related 
packages. Did you want it?

-- 
Magnus Holmgren        holmgren@debian.org
Debian Developer 
[signature.asc (application/pgp-signature, inline)]

Message sent on to Magnus Holmgren <holmgren@debian.org>:
Bug#543150. (Sat, 29 Aug 2009 09:18:09 GMT) Full text and rfc822 format available.

Message #23 received at 543150-submitter@bugs.debian.org (full text, mbox):

From: Andreas Metzler <ametzler@downhill.at.eu.org>
To: 543150-submitter@bugs.debian.org, debian-devel@lists.debian.org
Subject: Re: Bug#543150: ITP: pdkim -- cryptographically identify the sender of email
Date: Sat, 29 Aug 2009 11:05:17 +0200
On 2009-08-29 Magnus Holmgren <holmgren@debian.org> wrote:
> On måndagen den 24 augusti 2009, Andreas Metzler wrote:
[...]
>> On a sidenote, is the cause for this ITP just exim or is general
>> interest in this library?

> Primarily for Exim. Also because I already maintain a couple of DKIM-related 
> packages. Did you want it?

No, I just thought it was just wondering whether separate packaging
made sense. If exim was the only customer we could have avoided a pdkim
package, since exim includes a copy.

cu andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'




Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org, Magnus Holmgren <holmgren@debian.org>:
Bug#543150; Package wnpp. (Sat, 19 Feb 2011 17:25:15 GMT) Full text and rfc822 format available.

Acknowledgement sent to Lucas Nussbaum <lucas@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org, Magnus Holmgren <holmgren@debian.org>. (Sat, 19 Feb 2011 17:25:15 GMT) Full text and rfc822 format available.

Message #28 received at 543150@bugs.debian.org (full text, mbox):

From: Lucas Nussbaum <lucas@debian.org>
To: 543150@bugs.debian.org
Cc: control@bugs.debian.org
Subject: pdkim: changing back from ITP to RFP
Date: Sat, 19 Feb 2011 17:06:03 +0000
retitle 543150 RFP: pdkim -- cryptographically identify the sender of email
noowner 543150
thanks

Hi,

This is an automatic email to change the status of pdkim back from ITP
(Intent to Package) to RFP (Request for Package), because this bug hasn't seen
any activity during the last 6 months.

If you are still interested in adopting pdkim, please send a mail to
<control@bugs.debian.org> with:

 retitle 543150 ITP: pdkim -- cryptographically identify the sender of email
 owner 543150 !
 thanks

However, it is not recommended to keep ITP for a long time without acting on
the package, as it might cause other prospective maintainers to refrain from
packaging that software. It is also a good idea to document your progress on
this ITP from time to time, by mailing <543150@bugs.debian.org>.

Thank you for your interest in Debian,
-- 
Lucas, for the QA team <debian-qa@lists.debian.org>




Changed Bug title to 'RFP: pdkim -- cryptographically identify the sender of email' from 'ITP: pdkim -- cryptographically identify the sender of email' Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Sat, 19 Feb 2011 17:26:38 GMT) Full text and rfc822 format available.

Removed annotation that Bug was owned by Magnus Holmgren <holmgren@debian.org>. Request was from Lucas Nussbaum <lucas@debian.org> to control@bugs.debian.org. (Sat, 19 Feb 2011 17:26:38 GMT) Full text and rfc822 format available.

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Apr 16 04:46:02 2014; Machine Name: buxtehude.debian.org

Debian Bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.