On Wed, 18 Mar 2020 12:18:34 +0200, Damyan Ivanov wrote: > Fixing the root of the problem seems better for me for two reasons: > > 1) fix what is broken instead of working around it in numerous places > 2) consumers outside of Debian would benefit too I agree, also with the rest of your mail. Thanks for moving this forward! > But to fully measure the impact, it would be nice to have the number > of failing packages built with a patched HTTP::Tiny. I have one small concern: As the change is about checking remote SSL certs, and tests don't/can't/must not call out to the internet, is it possible that we won't really catch all potential issues? Cheers, gregor -- .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06 `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe `- NP: Ostbahn-Kurti & Die Chefpartie: A Schritt Vire (Zwa Schritt Zruck)
Attachment:
signature.asc
Description: Digital Signature