[Pkg-haproxy-maintainers] Certificate Transparency support: Backport to 1.5?

georg at riseup.net georg at riseup.net
Thu Aug 13 15:03:11 UTC 2015


Hi Apollon,

No need to Cc me, I'm subscribed to the list.
Thanks for your fast response!

On 15-08-13 17:42:35, Apollon Oikonomopoulos wrote:
> On 16:24 Thu 13 Aug     , georg at riseup.net wrote:
> > Posting to this mailinglist instead of opening a bug because wanted to
> > first check out, if you would be willing and able to do this:
> > 
> > Certificate Transparency support was added to haproxy in March 2015; see
> > the thread [1], the commit [2] and the release [3] for this.
> > 
> > Would it be possible to backport this to 1.5, to make it available via the
> > repositories?
> 
> Thanks for reporting this. Unfortunately there are two issues at hand:
>
>  - This is a new feature, which means that it will not meet the criteria 
>    for inclusion into Jessie via a stable upload.

Yeah, I'm aware of this, but wouldn't a upload to jessie-backports be
possible?

>  - It requires OpenSSL 1.0.2 which is only available in 
>    testing/unstable.

I see, missed this..

> Thus said, if we do backport this, it will be done only for 
> testing/unstable. OTOH, we are planning to upload 1.6 to experimental 
> soon, which would allow full access to the latest features. Would you be 
> willing to use 1.6 from experimental once uploaded or would you prefer a 
> patched 1.5?

I think, I would prefer a upload to jessie-backports, via a patched 1.5
or a "vanilla" 1.6. I guess, this is too much hassle, because this would
need aswell a backport of openssl, right? If this is the case (not sure
what the openssl people think about backporting), I would take a version
from testing or experimental. Again, for me it doesn't matter if it's
1.5 or 1.6, because wouldn't use this in production.

Thanks,
Georg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-haproxy-maintainers/attachments/20150813/d8e59eb8/attachment.sig>


More information about the Pkg-haproxy-maintainers mailing list