Hello,

Would it be possible to have rust-rustls-native-certs 0.8.1 uploaded
to unstable?

As Rustls version 0.23 is now in unstable, we need 0.8.1 in unstable
for ntpd-proto

Thanks!
Sylvestre

Quoting Sylvestre Ledru (2025-02-16 22:59:23)

Unfortunately it seems that a bunch of packages are depending on
rust-rustls-native-certs 0.6.x.  I might introduce a versioned build of
rust-rustls-native-certs to have them both available concurrently, but
from my experience with ftpmaster with the recent NEW processing, I
doubt that it will make it in time for the freeze.

What I can recommend - regardless of the above - is to strongly consider
moving to use librust-rustls-platform-verifier-dev, which has now
entered unstable, patched to use rust-rustls-native-certs 0.6.x but that
should not affect your use of it.

This is also now recommended upstream, so you can expect collaboration
from your various upstream projects in such migration.

 - Jonas

(note: this is a reply to a post on bug 1111069 but bug 1096153
seems a more appropriate place to discuss this)
Already FTBFS and is not in testing, so I don't think it should be
a blocker here.
When I started investigating the tungstenite packages
(tungstenite, async-tungstenite and tokio-tungstenite)
in light of the upcoming rustls-native-certs update. I
came to the conclusion that I wanted to get them onto
the current rustls stack, with functioning tests first.

I initially thought this would involve semver bumps,
but that turned out not to be required. I've now
uploaded that work to unstable, and would like to
have it in testing before we start the
rustls-native-certs transition.

async-tungstenite and tokio-tungstenite should now
simply require patches to be dropped and the packaging
regenerated (or dependencies manually updated).

tungstenite will require a patch dropping and
replacing with a patch cherry-picked from upstream.
https://github.com/snapview/tungstenite-rs/commit/fb1f73b01a6aee6641bb22eb8c8deb892110120e

I'm not expecting any of these changes to be
difficult but I held off on preparing them until
I'd dealt with any fallout from the switch to the
rustls 0.23 stack.

Quoting Peter Green (2025-08-14 15:52:16)

Agreed.

Makes sense indeed.  Good catch.

Sure - let's wait for that, no problem :-)


 - Jonas

We believe that the bug you reported is fixed in the latest version of
rust-rustls-native-certs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1096153@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated rust-rustls-native-certs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 30 Aug 2025 10:36:08 +0200
Source: rust-rustls-native-certs
Architecture: source
Version: 0.8.1-4
Distribution: unstable
Urgency: medium
Maintainer: Jonas Smedegaard <dr@jones.dk>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Closes: 1096153
Changes:
 rust-rustls-native-certs (0.8.1-4) unstable; urgency=medium
 .
   * upload to unstable;
     closes: bug#1096153, thanks to Sylvestre Ledru and Peter Green
   * add patches 1001_*
     to accept newer minor versions of crates rustls-webpkit x509-parser,
     superseding cherry-picked patch and patch 2001_rustls-webpkit;
     relax build- and autopkgtest-dependencies
     for crates rustls-webpkit x509-parser
   * update watch file: use file format 5
Checksums-Sha1:
 da17b837b119aadcac67e0cb2892142cea8321f6 2836 rust-rustls-native-certs_0.8.1-4.dsc
 8adf7f76449de2bbac104c299dc0910eeca83b76 7372 rust-rustls-native-certs_0.8.1-4.debian.tar.xz
 f6aa5888cc4f7afd3cea192db3a89711542f1032 14717 rust-rustls-native-certs_0.8.1-4_amd64.buildinfo
Checksums-Sha256:
 933f14da8bcc2c9aa4b93328111e97e6b28cfe6513c0b0630fdc5e70b0bb9b82 2836 rust-rustls-native-certs_0.8.1-4.dsc
 81d8f43d2852ae63e43977729bfaa0ff34e86ea48e7f20c4a1c393f0c161d381 7372 rust-rustls-native-certs_0.8.1-4.debian.tar.xz
 9185d3229cdcd83f365bc53635325c8b8699989fa42840fae71bc7034c976034 14717 rust-rustls-native-certs_0.8.1-4_amd64.buildinfo
Files:
 a2709eab32ff3b7af863f69a070337bf 2836 rust optional rust-rustls-native-certs_0.8.1-4.dsc
 b0864e236ba2805b28fa826c349c8294 7372 rust optional rust-rustls-native-certs_0.8.1-4.debian.tar.xz
 c72e7686a448f935473bb31dfa14bb01 14717 rust optional rust-rustls-native-certs_0.8.1-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=pJyp
-----END PGP SIGNATURE-----