Replacing Digest::SHA1 with Digest::SHA and removal of libdigest-sha1-perl package

Contents

  1. Replacing Digest::SHA1 with Digest::SHA and removal of libdigest-sha1-perl package
    1. Why
    2. How
      1. Contacting Upstream for Perl modules
      2. Submitting to Debian BTS
    3. Status

Why

Most of the functionality (except sha1_transform) of Digest::SHA1 is also provided by Digest::SHA. Switching from Digest::SHA1 to Digest::SHA should be in principle as easy as substituting the use of Digest::SHA1 with Digest::SHA.

Digest::SHA is in Perl core since version 5.9.3 and thus is in Debian's perl since Lenny.

Changing use of Digest::SHA1 to Digest::SHA would thus reduce external dependencies by one.

Packages using Digest::SHA instead of Digest::SHA1 can then drop the (Build-)Depends(-Indep) on libdigest-sha1-perl.

How

  1. Investigate the Debian Perl Group packages, and forward patches to upstream authors.
  2. Fill bugs on non-Debian Perl Group packages too.

  3. After patches for the/some Perl modules are sent upstream announce 594273 on debian-devel for possible MBF/increasing severity and help out where possible to fix the packages.

  4. Add lintian check for obsolete libdigest-sha1-perl dependency?

Contacting Upstream for Perl modules

You can use something like the following to contact upstream (in this case with patch added): 

Hi                                                
                                                                   
Attached patch changes the module to use Digest::SHA instead of
Digest::SHA1. Digest::SHA is part of the standard perl distribution
since perl v5.9.3 so this reduces the number of external
dependencies by one.
         
Please consider applying it for the next release.
                                                                             
Regards,

Submitting to Debian BTS

When submitting bugs to the Debian Bugtracker the following user and usertag may be used: 

User: debian-perl@lists.debian.org
Usertags: digest-sha-perl-transition

Status: http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=debian-perl@lists.debian.org;tag=digest-sha-perl-transition

Status

Legend

(./)

Transitioned/OK

<!>

Has issues

{X}

Unfixed / Needs upload

{i}

Reported (bugreport, patch, forwarded...)

(!)

Pending

{*}

Not needed (e.g. upstream has fallback to Digest::SHA1)

Package

State Upstream

State Debian

apt-cacher

{i}

{i} 624568

barnowl

{X}

{i} 625903

gnupod-tools

{X}

{i} 625875

ikiwiki-hosting-web

(./)

(./) 623957

interchange

{X}

{i} 625904

kgb-client

{i}

{i}

libapache-htpasswd-perl

{i} RT#60267

{X}

libatompub-perl

{i} RT#68183

(./)

libauthen-passphrase-perl

(!) RT#59917

{X}

libbloom-filter-perl

{i} RT#67716

(./)

libcache-cache-perl

{i} RT#67717

{X}

libcache-perl

{X}

{X}

libcgi-application-plugin-authentication-perl

(./) RT#67840

(./)

libcrypt-hcesha-perl

{i} RT#67841

{X}

libcrypt-mysql-perl

{i} RT#59918

{X}

libcrypt-openssl-dsa-perl

{i} RT#60271

{X}

libdata-serializer-perl

{X}

{X}

libdbix-class-cursor-cached-perl

{X}

{X}

libdigest-hmac-perl

{X}

{X}

libimdb-film-perl

{X}

{X}

libmoosex-storage-perl

{X}

{X}

libnet-dns-sec-perl

{i} RT#60269

{X}

libnet-epp-perl

{X}

{X}

libnet-oauth-perl

{X}

{X}

libnet-openid-consumer-perl

{X}

{X}

libnet-openid-server-perl

{X}

{X}

libnet-snmp-perl

{i} RT#68182

{X}

libnet-xmpp-perl

{i} RT#68181

{X}

libpar-perl

(./)

(./) r73482

libperl5i-perl

{i} #196

{X}

libpoe-component-jabber-perl

{i} RT#68010

{X}

librdf-query-perl

(!) RT#68007

{i} 625989

librdf-trine-perl

(./)

(./) 625978

libsql-translator-perl

{i} RT#67989

{X}

libuuid-tiny-perl

{*}

(./) r74094

libxml-atom-perl

{i} RT#60263

{X}

mimedefang

{X}

{i} 625870

postgrey

(./) Changes

(./) 625697

razor

{X}

{i} 624579

rkhunter

{X}

{*} Suggests libdigest-sha1-perl

smbldap-tools

{X}

{i} 624065

spamassassin

{i} Bug#6200 (Razor depends on Digest::SHA1)

{X}

sqlfairy

{i} RT#67989

{X}

syslinux-common

{X}

(./) 625812

vclt-tools

(./)

(./) 624685