#407 Bundled lib exception request (copylibs) for sha1 bundled with apt-cacher-ng
Closed: Fixed None Opened 8 years ago by kenjiro.


I have been working on packaging apt-cacher-ng (caching proxy server) now, please see [1].

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1074147

apt-cacher-ng uses a sha1 library, Uwe Hollerbach's modified from Peter C. Gutmann's implementation.

/ heavily modified by Uwe Hollerbach <uh@alumni.caltech edu> /
/ from Peter C. Gutmann's implementation as found in /
/ Applied Cryptography by Bruce Schneier /

So can you please allow to include this sha1 library in the apt-cacher-ng like md5? [2]

[2] https://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries#cite_note-1




After I created this ticket, I get no response yet.[[BR]]
If I misunderstand or need to submit more information, please tell me.

At today's meeting people pretty much agreed with:

Proposal: Allow bundling of this sha1 implementation for the same reasons we allow md5 bundling. Use virtual Provides: bundled(sha1-hollerbach) to mark it

  • +1: abadger1999, tibbs, spot, geppetto
  • -1:
  • Need votes from Rathann, RemiFedora, racor, SmootherFr0gZ, limburgher
  • One more to pass

Thank you so much.
I completely agree about this.

I close this ticket.(If I should not close, please tell me.)

Don't close it unless you intend to port the code to use an existing, unbundled library :-)

We put the proposal to allow bundling of this code up for a vote but it needs five +1's from FPC members to pass. So far, we only have 4.

Ah... Sorry!

"One more to pass"

I had to read it.

That makes +5 :-)

exception added to the no bundled library page. Please use Provides: bundled(sha1-hollerbach) to mark the usage.

Announcement text:


A new bundled library exception has been added for packages which bundle the hollerbach implementation of sha1. See the sha1 entry of https://fedoraproject.org/wiki/Packaging:No_Bundled_Libraries#Packages_granted_exceptions for details.


Thank you so much! I will port it soon!

Finally, I released.
So I close this case. Thank you so much, FPC.

Login to comment on this ticket.