[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#223311: ITP: debsigs-ng -- create and verify signatures on .deb-files



* Branden Robinson (branden@debian.org) [031209 11:25]:
> On Mon, Dec 08, 2003 at 08:16:55AM +0100, Andreas Barth wrote:
> > * Package name    : debsigs-ng
> >   Version         : 0.1
> >   Upstream Author : Andreas Barth <aba@not.so.argh.org>
> > * URL             : http://debsigs.turmzimmer.net/
> > * License         : GPL
> >   Description     : create and verify signatures on .deb-files
> > 
> > debsigs-ng is a low-level tool for creation and verification of
> > signature on the Debian archive files (deb).
> > 
> > The created signed files are strict compatible with dpkg and the
> > apt-utils. These tools could also verify older signatures done by
> > debsigs.

> Uh, debsigs has 6 outstanding bugs (3 normal, 3 wishlist), only one of
> which is tagged "patch", and it only got that patch 3 days ago -- from
> you.
> 
> Is there a motivation for "debsigs-ng" apart from impatience?

Yes. Impatience is no motivation at all.

The whole motivation is that I disagree with many design
considerations regarding the code of debsigs (e.g. the massive use of
perl-object-modules) that is IMHO making the code overly complex and
difficult. OO-programming is a good thing, but stretching it too far
is also possible. So, I'm doing a total rewrite.

And, I for myself, think that it's better to do a new implementation
in a new package.

If you disagree, and want that the re-write happens inside of debsigs,
please say so. But plainly speaking, I'd leave nothing over from the
current code.

My wish to upload a new package has nothing whatsoever to do with
impatience and/or your maintainership. It is only based on the "will
throw all code away"-issue.



Cheers,
Andi
-- 
   http://home.arcor.de/andreas-barth/
   PGP 1024/89FB5CE5  DC F1 85 6D A6 45 9C 0F  3B BE F1 D0 C5 D1 D9 0C



Reply to: