#1110778 rust-async-tls: please drop package: arguably unmaintained upstream and obsoleted by rust-futures-rustls

Package:
rust-async-tls
Source:
rust-async-tls
Submitter:
Jonas Smedegaard
Date:
2025-08-14 13:57:02 UTC
Severity:
normal
Tags:
#1110778#5
Date:
2025-08-11 05:57:47 UTC
From:
To:
Please drop package rust-async-tls from Debian: It has an open bug
upstream indicating that it might be best avoiding:
https://github.com/async-rs/async-tls/issues/60

I believe no other packages currently depend on this package in
unstable. See also related discussion at bug#1110553.

 - Jonas
-----BEGIN PGP SIGNATURE-----

wsG7BAEBCgBvBYJomYZYCRAsfDFGwaABIUcUAAAAAAAeACBzYWx0QG5vdGF0aW9u
cy5zZXF1b2lhLXBncC5vcmd5midY7HQrZGlbJy0Of0NNFRWDCmuDLttTPBk3zn0+
YhYhBJ/j6cNmkaaf9TzGhCx8MUbBoAEhAAAD2xAAl5KuX4e9A91XmdlC4rrhIChV
VqkRgmdLmliSiGYd+U1Vg0uIfPpwlU59phjLze8fEcBAlScd9TxroO4YOdFlg5Jk
fzIb4wk1jbLhwL4NEmVoamQWVeA8evmxrjBKw+vqTmTd0rHAfRTsdDizvEjB17Fl
buAT01dkEr9ZLYxYnAWMyFnEBQFHJBA1/dEZlhMKQMLVucg7WZcf597NfLZ/qMjg
nBQ9lu3uyxGUG5NpSnNc3xpFaM9zdMOYq2cjfHqzr7XPxXPwRZ/dBlmph2L6GHW1
m5qyxEHNte+1bNxV0aGFUdPwYzegoPIVvT8FC3kMoyWdQo9M9m5XixsOu3vqhttP
aiei5AhAJM8jFh7d0m+MCh8/XaHB0CFK6ZKiZgbohgNRWKXBnekxQK5EiHFrd9TG
ITNxNKbVptisRcUgWjSUpjC7GftDoc4JAWhBxvc2SrVeJ5VvgKjbdyHl4pGE1PcE
bblI1tdZVv3oLV9d7k3QQa2xDK1J7gvJ7BzCSnZcReKCkbDQ1ghx9i+9dcjSI4qJ
KmU+uNk3w4553xaktcrWWlQAuklZ3HtVTLl0ODlfuo4IXutzHZaiUqVcay+EqqIN
ulp2q9nAhaIG/YxBZTTchHfGlSCTK11Ev/PSK5AF1ZuVwQdo973iuF5cdUXlZGO0
HNh2bLsSqN4ls22rsGs=
=8PJD
-----END PGP SIGNATURE-----

#1110778#12
Date:
2025-08-12 14:12:27 UTC
From:
To:
severity 1110778 serious
thanks

I've fixed this package up so it doesn't block the rustls-webpki update
but I agree it should probably not be in forky, so I am bumping this
up to serious.

If someone wants to keep this package please speak up now.

#1110778#17
Date:
2025-08-12 17:58:31 UTC
From:
To:
unless I missed something, librust-async-tungstenite still Depends: on
it ?
https://sources.debian.org/src/rust-async-tungstenite/0.28.2-1/Cargo.toml#L128

I packaged it as dependency for async-tungestenite; no objections for a
removal otherwise.

best,

werdahias

#1110778#22
Date:
2025-08-14 13:55:58 UTC
From:
To:
Severity 1110778 important
Thanks
Thanks for spotting what Jonas and I missed.

The dependency is optional, but said optional dependency *is* used
by rust-magic-wormhole.

I was about to file a bug about this upstream, but I hesistated because
frankly futures-rustls doesn't look much better maintained than
async-tls. Yes, right now it uses current rustls upstream (whereas
async-tls is patched in Debian to use current rustls) but it's
last release was still a year ago.

Further looking at the git history it looks like about a month after
the last release the author tried to make another one but
did not go through with it for unknown reasons and there has
been little activity since.