Hi Drew, On Sat, 2023-12-09 at 11:24 +0100, Drew Parsons wrote: > My mistake, I have go-pkcs11-dev installed locally, but it's the one > holding up these upgrades. > > The golang-github-google-go-pkcs11-dev rejection message was: > > the OASIS IPR stuff is really weird, but at least this: > (...)solely for the purpose of developing and promoting the OASIS > Deliverable(...) > > already makes it non-free. I did a bit of research and found that golang-github-miekg-pkcs11 had the same problem with embedded OASIS Open code. What the maintainer has done is repack the source to remove the non-DFSG-compliant OASIS code and change the imports and (B-)Deps to use libnss instead, which provides the same functionality. I've locally cloned the Salsa repo for golang-github-google-go-pkcs11-dev, and made the following changes: * Bumped the version to 0.3.0 * Repacked it to remove third_party/pkcs11/* (0.3.0+dfsg) * Patched in the libnss imports (copying the miekg-pkcs11 package) * Patched the tests so they use their own ./syslog.tmp instead of the non- existent one at /var/log/syslog I've got access to the Salsa repo, so are you ok with me pushing these changes to the repo? Kind regards, Maytham
Attachment:
signature.asc
Description: This is a digitally signed message part