Debian Bug report logs - #702174
RFS: estonianidcard/3.7.0.1116-1 [ITP] -- Estonian ID card support packages

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Siim Põder <siim@p6drad-teel.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: RFS: estonianidcard/3.7.0 [ITP] -- Estonian ID card support packages

Date: Sun, 03 Mar 2013 14:54:01 +0000

Package: sponsorship-requests
Severity: wishlist


Dear mentors,

I am looking for a sponsor for a suite of packages for Estonian ID card support.
ID card is used extensively in Estonia for authentication and signing digital
documents both for public and private sector services. Currently packages are
available for Fedora, Ubuntu, openSuse, osx and Windows but not for Debian. 


 * Package name    : estonianidcard
   Version         : 3.7.0.1116-1
   Upstream Author : info@ria.ee
 * URL             : http://www.ria.ee/
 * License         : LGPL 2.1
   Section         : misc

As upstream distributes the components separately, currently the proposed Debian
packages are also split in the same way (separate source packages):

qesteidutil
  QT card management utility (certificates and pins but also personal details)
qdigidoc
  QT signing and encryption utiltiy
esteidfirefoxplugin
  enables authentication and document signing in the browser
libdigidoc & libdigidocpp
  support libraries for digidoc documents
esteidpkcs11loader
  browser helper to set up authentication and signing authorities and pkcs11
  plugin
esteidcerts
  CA, intermediate and OCSP certficates for esteid cards
estonianidcard
  metapackage to install all the above mentioned packages

The source packages are provided by the Estonian Information System's Authority,
currently at version 3.7.0 (plus a per-component release number that varies) and
are available at:

http://ftp.ria.ee/pub/id/signed_repository/

mentors.debian.net links for all the source packages:
http://mentors.debian.net/package/estonianidcard
http://mentors.debian.net/package/qdigidoc
http://mentors.debian.net/package/qesteidutil
http://mentors.debian.net/package/esteidfirefoxplugin
http://mentors.debian.net/package/esteidpkcs11loader
http://mentors.debian.net/package/libdigidoc
http://mentors.debian.net/package/libdigidocpp
http://mentors.debian.net/package/esteidcerts

dget commands to download the packages:
dget -x http://mentors.debian.net/debian/pool/main/e/estonianidcard/estonianidcard_3.7.0.1116-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/q/qdigidoc/qdigidoc_3.7.0.996-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/q/qesteidutil/qesteidutil_3.7.0.907-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/e/esteidfirefoxplugin/esteidfirefoxplugin_3.7.0.931-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/e/esteidpkcs11loader/esteidpkcs11loader_3.7.0.869-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/libd/libdigidoc/libdigidoc_3.7.0.912-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/libd/libdigidocpp/libdigidocpp_3.7.0.972-1.dsc
dget -x http://mentors.debian.net/debian/pool/main/e/esteidcerts/esteidcerts_3.7.0.8890-1.dsc

These are all NEW packages, closing their ITP bugs.

Regards,
Siim Põder

Message #14 received at 702174@bugs.debian.org (full text, mbox, reply):

From: Paul Wise <pabs@debian.org>

To: Siim Põder <siim@p6drad-teel.net>, 702174@bugs.debian.org

Subject: Re: Bug#702174: RFS: estonianidcard/3.7.0 [ITP] -- Estonian ID card support packages

Date: Mon, 4 Mar 2013 18:55:59 +0800

I don't intend to sponsor these packages, but here is a review:

mentors.d.n cut off my downloads early so I wasn't able to review all
the packages.

General:

Please run wrap-and-sort -sa to wrap various files.

The package descriptions are too short.

The Homepage redirects to its https version.

Some packages don't close their ITPs.

The comments in debian/rules are not needed.

The copyright information is incorrect.

I would suggest debhelper rules.tiny and compat 9 instead of cdbs.

Please run these automatic checks against your packages:

https://wiki.debian.org/HowToPackageForDebian#Check_points_for_any_package

The watch files make a couple of common mistakes:

http://wiki.debian.org/debian/watch#Common_mistakes

estonianidcard:

The package should probably be a native package?

The upstream tarball looks weird, it only contains an empty file.

esteidpkcs11loader:

The patch Fix-library-directory makes the package only work on
amd64/i386, please change the Architecture line in debian/control or
fix the patch.

Why is JavaScript code loading ELF shared libraries??! Especially
loading them from an absolute path is very wrong.

esteidfirefoxplugin:

No need to make override_dh_strip .PHONY.

No need to tell dh what the dbg package is since you do that for dh_strip.

override_dh_auto_configure is not needed.

Please ask upstream to remove the pre-compiled or generated files from
their tarball:

keychain-tool firefox-win/plugin-win.aps firefox-win/plugin-win.res ie/dlldata.c

Please ask upstream to remove the embedded code copy of the OpenSSL
headers: include/openssl

http://wiki.debian.org/EmbeddedCodeCopies

Likewise for the other files in include/, they are all embedded code
copies, from Mozilla and scute.

esteidcerts:

Why do the certs need to be put in the ca-certificates db? Either they
should be in ca-certificates itself (unlikely), or they should not be
side-loaded into it via this package.

The debian/rules file looks a bit weird, seems like you install things
twice, once with dh_install and once manually.

-- 
bye,
pabs

http://wiki.debian.org/PaulWise

Message #19 received at 702174-done@bugs.debian.org (full text, mbox, reply):

From: Bart Martens <bartm@quantz.debian.org>

To: 702174-done@bugs.debian.org

Subject: closing RFS: estonianidcard/3.7.0.1116-1 [ITP] -- Estonian ID card support packages

Date: Sun, 21 Jul 2013 04:23:30 +0000

Package estonianidcard has been removed from mentors.

Send a report that this bug log contains spam.