Hi Peymaneh, On 6/16/21 1:32 AM, Peymaneh Nejad wrote: > Hi, > > I am working on packaging github.com/smallstep/zcrypto (which is a indirect dependency of caddy) > > These are the dependencies: > > * github.com/smallstep/zcrypto depends on github.com/zmap/zcertificate v0.0.0-20190521191901-30e388164f71 > > * github.com/zmap/zcertificate v0.0.0-20190521191901-30e388164f71 > > depends on github.com/zmap/zcrypto > > * github.com/zmap/zcrypto depends on github.com/zmap/zcertificate v0.0.0-20180516150559-0e3d58b1bac4 Versions need not be too hardbound. Have you checked if zcrypto can build with the newer version of zcertificate? If it can, the version problem is solved. For the other circular dep, zcertificate is used only in "verifier/graph.go" and the corresponding test file in zcrypto so you can: * Simply exclude this file from building and patch things accordingly. Now, This now would not need a dep on zcertificate anymore. Build zcrypto normally (w/o a B-D on zcertificate) * Build zcertificate normally, with a B-D on zcrypto * Upload zcertificate and zcrypto to unstable, and wait for them to get accepted. * Now after they are accepted, the .deb of both will be available in the archive Now, for the zcrypto package, include that file(verifier/graph.go - which was earlier excluded from build) and add a B-D on zcertificate in the next source-only upload. Done. What do you think? Nilesh
Attachment:
signature.asc
Description: OpenPGP digital signature