#1146163 transition: botan3

Package:
release.debian.org
Source:
release.debian.org
Submitter:
László Böszörményi
Date:
2026-10-04 19:55:05 UTC
Severity:
normal
Tags:
#1146163#5
Date:
2026-08-30 14:51:07 UTC
From:
To:
Hi RMs,

The next botan3 transition. It remained a small one, affecting four
packages only. All builds fine with the new botan3.
But self-testing of rnp fails with both the old and new versions of
botan3. The difference is that with botan3 3.12.0 three tests fail,
with 3.13.0 the same three plus four (seven in total) tests fail. The
reason still needs to be investigated.

Thanks for considering,
Laszlo/GCS
#1146163#12
Date:
2026-09-06 08:37:49 UTC
From:
To:
Go ahead

Please do not forget a to file a bug for this issue.

Cheers
#1146163#17
Date:
2026-09-13 09:06:45 UTC
From:
To:
 I'm slow on this one, not yet uploaded. Reason is if you want to
reconsider your confirmation. The self-testing failure of rnp is gone
with the current botan3 version in Sid. The self-testing failure with
botan3 in experimental remains, seems to be a transitional one due to
recent OpenPGP changes. Reasoning is in the rnp bugreport [1]. It
seems rnp upstream knew about this for weeks, adapted some of its
tests but there is no new release, not closed the issue itself even.
What's your opinion on this now?

Regards,
Laszlo/GCS
[1] https://bugs.debian.org/1147578
#1146163#22
Date:
2026-09-13 10:06:43 UTC
From:
To:
Control: tags -1 = moreinfo

Ah, I missed that botan3 also has self-test failures. then let's wait
until this is fixed. Please remove the moreinfo tag once botan3 is
ready.

Cheers
#1146163#29
Date:
2026-09-13 12:35:12 UTC
From:
To:
Control: tags -1 -moreinfo
 My bad wording. Botan itself is fine, built and self-tested on all
architectures; but it is stricter on RSA keys it accepts.
It is src:rnp that has self-test failures when compiled against the
new botan3 release. In short, the reason is the following. New opengpg
removes leading zero bytes from keys. rnp uses such keys for
self-testing. But new botan3 no longer consider this valid. as RSA
ciphertexts and signatures are not fully qualified; these are now one
byte shorter than the modulus.
In very short, botan3 will build fine, reverse dependencies build
fine, src:rnp self-testing will fail.

Regards,
Laszlo/GCS
#1146163#36
Date:
2026-09-26 07:35:02 UTC
From:
To:
 This issue of rnp is now fixed, all packages build and self-test with
the new botan3 version now.
The transition is safe. If you have time, please give it a go.

Laszlo/GCS
#1146163#41
Date:
2026-09-28 13:02:59 UTC
From:
To:
Control: tags -1 confirmed

Go ahead.

Emilio
#1146163#48
Date:
2026-10-04 19:52:48 UTC
From:
To:
The old binaries got removed. Closing

Cheers