[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#901499: marked as done (ITP: php-yubitwee -- YubiKey OTP Validator library)

Your message dated Sun, 11 Oct 2020 14:27:16 +0200
with message-id <[🔎] 20201011122716.GB418@beskar.mdcc.cx>
and subject line Re: #901499 ITP: php-yubitwee -- YubiKey OTP Validator library
has caused the Debian Bug report #901499,
regarding ITP: php-yubitwee -- YubiKey OTP Validator library
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
901499: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901499
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
Owner: Joost van Baal-Ilić <joostvb@debian.org>

* Package name    : php-yubitwee
  Version         : 1.1.3
  Upstream Author : François Kooman <fkooman@tuxed.net>
* URL             : https://git.tuxed.net/fkooman/php-yubitwee/about/
* License         : MIT/X
  Programming Lang: PHP
  Description     : YubiKey OTP Validator library

 A very simple, secure YubiKey OTP Validator with pluggable HTTP client.

vpn-server-api ( https://github.com/eduvpn/vpn-server-api ) depends upon
php-yubitwee.  (At one point in time vpn-server-api will migrate from using
php-yubitwee to U2F.  It is not yet known _when_ that will happen.)  The
vpn-server-api and php-yubitwee packages are part of the Let's Connect! VPN
software suite, being developed by SURFnet, the Dutch National Research and
Education Network.  Packaging php-yubitwee in Debian is the first step towards
integrating the Let's Connect! stack in Debian.  Currently, the suite consists
of 15 source packages, see https://github.com/eduvpn/eduvpn-debian .

Refer to https://letsconnect-vpn.org and https://eduvpn.org/ for more
information.

I'll request to package this software in the PHP PEAR and Composer group at
https://salsa.debian.org/php-team/pear .

Bye,

Joost

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message --- 
I won't package this software for Debian, and I don't think anybody should:
upsteam says:

"the correct thing to be doing is using U2F, so do not use this library if
you are writing new software, please investigate U2F as that will be more
secure than using the proprietary YubiCo solution for verifying hardware
tokens!"

(at https://git.tuxed.net/fkooman/php-yubitwee/about/ ).

Bye,

Joost

--- End Message ---
Reply to: