#1110778 rust-async-tls: please drop package: arguably unmaintained upstream and obsoleted by rust-futures-rustls #1110778
- Package:
- rust-async-tls
- Source:
- rust-async-tls
- Submitter:
- Jonas Smedegaard
- Date:
- 2025-08-14 13:57:02 UTC
- Severity:
- normal
- Tags:
Please drop package rust-async-tls from Debian: It has an open bug upstream indicating that it might be best avoiding: https://github.com/async-rs/async-tls/issues/60 I believe no other packages currently depend on this package in unstable. See also related discussion at bug#1110553. - Jonas -----BEGIN PGP SIGNATURE----- wsG7BAEBCgBvBYJomYZYCRAsfDFGwaABIUcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcmd5midY7HQrZGlbJy0Of0NNFRWDCmuDLttTPBk3zn0+ YhYhBJ/j6cNmkaaf9TzGhCx8MUbBoAEhAAAD2xAAl5KuX4e9A91XmdlC4rrhIChV VqkRgmdLmliSiGYd+U1Vg0uIfPpwlU59phjLze8fEcBAlScd9TxroO4YOdFlg5Jk fzIb4wk1jbLhwL4NEmVoamQWVeA8evmxrjBKw+vqTmTd0rHAfRTsdDizvEjB17Fl buAT01dkEr9ZLYxYnAWMyFnEBQFHJBA1/dEZlhMKQMLVucg7WZcf597NfLZ/qMjg nBQ9lu3uyxGUG5NpSnNc3xpFaM9zdMOYq2cjfHqzr7XPxXPwRZ/dBlmph2L6GHW1 m5qyxEHNte+1bNxV0aGFUdPwYzegoPIVvT8FC3kMoyWdQo9M9m5XixsOu3vqhttP aiei5AhAJM8jFh7d0m+MCh8/XaHB0CFK6ZKiZgbohgNRWKXBnekxQK5EiHFrd9TG ITNxNKbVptisRcUgWjSUpjC7GftDoc4JAWhBxvc2SrVeJ5VvgKjbdyHl4pGE1PcE bblI1tdZVv3oLV9d7k3QQa2xDK1J7gvJ7BzCSnZcReKCkbDQ1ghx9i+9dcjSI4qJ KmU+uNk3w4553xaktcrWWlQAuklZ3HtVTLl0ODlfuo4IXutzHZaiUqVcay+EqqIN ulp2q9nAhaIG/YxBZTTchHfGlSCTK11Ev/PSK5AF1ZuVwQdo973iuF5cdUXlZGO0 HNh2bLsSqN4ls22rsGs= =8PJD -----END PGP SIGNATURE-----
severity 1110778 serious thanks I've fixed this package up so it doesn't block the rustls-webpki update but I agree it should probably not be in forky, so I am bumping this up to serious. If someone wants to keep this package please speak up now.
unless I missed something, librust-async-tungstenite still Depends: on it ? https://sources.debian.org/src/rust-async-tungstenite/0.28.2-1/Cargo.toml#L128 I packaged it as dependency for async-tungestenite; no objections for a removal otherwise. best, werdahias
Severity 1110778 important Thanks Thanks for spotting what Jonas and I missed. The dependency is optional, but said optional dependency *is* used by rust-magic-wormhole. I was about to file a bug about this upstream, but I hesistated because frankly futures-rustls doesn't look much better maintained than async-tls. Yes, right now it uses current rustls upstream (whereas async-tls is patched in Debian to use current rustls) but it's last release was still a year ago. Further looking at the git history it looks like about a month after the last release the author tried to make another one but did not go through with it for unknown reasons and there has been little activity since.