[Pkg-running-devel] Garming plugin packages in Debian?

Andreas Diesner garminplugin at andreas-diesner.de
Mon Jul 9 05:31:20 UTC 2012


Hi Ralf,

> However, it might also be worth looking into using the libgcrypt11
library:
I will have a look at libgcrypt11. If it is available in several
distributions it will be a good idea to integrate it. The MD5 hash in the
plugin can optional be used by a website to detect if a file has changed on
the device - I have never seen a website using it so far ;-)

> Would this also mean that there is a web page with tarballs of all
available versions ?
I usually add a tag label in github, when I release a new version:
      https://github.com/adiesner/GarminPlugin/tags

I haven't looked at uscan yet (didn't know it existed) but I will provide
something that it can "read". It might already work with github, at least
this website sounds like it does ( http://wiki.debian.org/debian/watch/ )

> BTW, the link "All source tar.gz downloads" on the garminplugin
> home page leads to a page without any links to tarballs
Fixed. Now it points to the tag pages of github.

Cheers
Andreas


2012/7/9 Ralf Treinen <treinen at pps.univ-paris-diderot.fr>

> Hi Andreas,
>
> On Sun, Jul 08, 2012 at 03:50:38PM +0200, Andreas Diesner wrote:
>
> > I removed the dependency to openssl. It was only needed to calculate MD5
> > sums. The MD5 sum calculation has been replaced by code that is under
> GPL2
> > or later. See subdirectory md5:
> > https://github.com/adiesner/GarminPlugin/tree/master/src/md5
>
> Thanks a lot for that rapid solution. This would indeed solve the problem.
> However, it might also be worth looking into using the libgcrypt11 library:
>
>   Description-en: LGPL Crypto library - runtime library
>    libgcrypt contains cryptographic functions.  Many important free
>    ciphers, hash algorithms and public key signing algorithms have been
>    implemented: [...]
>
> Using a library would be preferable to including a custom-copy of
> the md5 code, in particular when it is for security-sensitive stuff
> like cryptographic hash functions.
>
> > I have tested the functionality and build it on Launchpad. Everything
> seems
> > fine and working so far. I did not yet attach a version label to the new
> > version - but I will if you want to start creating a debian package.
>
> yes that would indeed be useful for me as I am now working on the debian
> package. Would this also mean that there is a web page with tarballs
> of all available versions ? This would be useful for the debian tool that
> checks for newly available upstream versions (uscan).
>
> (BTW, the link "All source tar.gz downloads" on the garminplugin
> home page leads to a page without any links to tarballs).
>
> Cheers -Ralf.
> --
> Ralf Treinen
> Laboratoire Preuves, Programmes et Systèmes
> Université Paris Diderot, Paris, France.
> http://www.pps.univ-paris-diderot.fr/~treinen/
> =====> New email address: treinen at pps.univ-paris-diderot.fr <=====
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-running-devel/attachments/20120709/1ceb0ec1/attachment.html>


More information about the Pkg-running-devel mailing list