• Bug#1100406: ITP: golang-github-cyberphone-json-canonicalization -- JSO

    From Roland Mas@21:1/5 to All on Thu Mar 13 14:30:01 2025
    XPost: linux.debian.devel

    Package: wnpp
    Severity: wishlist
    Owner: Roland Mas <lolando@debian.org>

    * Package name : golang-github-cyberphone-json-canonicalization
    Version : 6testfile-1
    Upstream Author : Anders Rundgren
    * URL : https://github.com/cyberphone/json-canonicalization
    * License : Apache-2.0 and BSD-3-Clause
    Programming Lang: Go
    Description : JSON Canonicalization Scheme (JCS)

    JSON Canonicalization
    .
    Cryptographic operations like hashing and signing depend on that the
    target data does not change during serialization, transport, or parsing.
    By applying the rules defined by JCS (JSON Canonicalization Scheme),
    data provided in the JSON [RFC8259
    (https://tools.ietf.org/html/rfc8259)] format can be exchanged "as is",
    while still being subject to secure cryptographic operations. JCS
    achieves this by building on the serialization formats for JSON
    primitives as defined by ECMAScript [ES (https://ecma-
    international.org/ecma-262/)], constraining JSON data to the I-JSON
    [RFC7493 (https://tools.ietf.org/html//rfc7493)] subset, and through a
    platform independent property sorting scheme.
    .
    Public RFC: https://tools.ietf.org/html/rfc8785
    (https://tools.ietf.org/html/rfc8785)
    .
    The JSON Canonicalization Scheme concept in a nutshell:
    .
    * Serialization of primitive JSON data types using methods compatible
    with ECMAScript's JSON.stringify()
    * Lexicographic sorting of JSON Object properties in a *recursive*
    process
    * JSON Array data is also subject to canonicalization, *but element
    order remains untouched*

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to All on Thu Mar 13 15:30:01 2025
    --Apple-Mail-78FB6EEF-A881-4912-A439-FC8FCB71CACF
    Content-Type: text/plain;
    charset=us-ascii
    Content-Transfer-Encoding: 7bit

    Did you notice this package?

    https://tracker.debian.org/pkg/golang-webpki-org-jsoncanonicalizer

    /Simon
    --Apple-Mail-78FB6EEF-A881-4912-A439-FC8FCB71CACF
    Content-Type: text/html;
    charset=utf-8
    Content-Transfer-Encoding: 7bit

    <html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Did you notice this package?<div><br></div><div><a href="https://tracker.debian.org/pkg/golang-webpki-org-jsoncanonicalizer">https://tracker.debian.org/
    pkg/golang-webpki-org-jsoncanonicalizer</a></div><div><br id="lineBreakAtBeginningOfSignature"><div dir="ltr">/Simon</div></div></body></html>
    --Apple-Mail-78FB6EEF-A881-4912-A439-FC8FCB71CACF--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Roland Mas@21:1/5 to All on Thu Mar 13 15:50:01 2025
    Le 13/03/2025 à 15:22, Simon Josefsson a écrit :
    Did you notice this package?

    https://tracker.debian.org/pkg/golang-webpki-org-jsoncanonicalizer

    Different one, or am I mistaken? I think apptainer depends on golang-github-cyberphone-json-canonicalization (at least, it's mentioned
    in the go.mod file).

    I also noticed your inital packaging work before I spent too much time
    on mine, so I ditched mine and switched to yours. Updated and uploaded
    now. Thanks :-)

    Roland.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to All on Thu Mar 13 16:00:01 2025
    --Apple-Mail-6C14544A-4B03-480E-A243-8691DA86DC46
    Content-Type: text/plain;
    charset=utf-8
    Content-Transfer-Encoding: quoted-printable

    I believe the code is the same, it has a symlink to provide the weird old namespace:

    https://salsa.debian.org/go-team/packages/golang-webpki-org-jsoncanonicalizer/-/blob/debian/latest/debian/golang-webpki-org-jsoncanonicalizer-dev.links?ref_type=heads

    There may better ways to do this, patches welcome :), but it works for several packages using this.

    I don’t think we should have two packages with the same code.

    /Simon

    13 mars 2025 kl. 15:45 skrev Roland Mas <lolando@debian.org>:

    Le 13/03/2025 à 15:22, Simon Josefsson a écrit :
    Did you notice this package?

    https://tracker.debian.org/pkg/golang-webpki-org-jsoncanonicalizer

    Different one, or am I mistaken? I think apptainer depends on golang-github-cyberphone-json-canonicalization (at least, it's mentioned in the go.mod file).

    I also noticed your inital packaging work before I spent too much time on mine, so I ditched mine and switched to yours. Updated and uploaded now. Thanks :-)

    Roland.


    --Apple-Mail-6C14544A-4B03-480E-A243-8691DA86DC46
    Content-Type: text/html;
    charset=utf-8
    Content-Transfer-Encoding: quoted-printable

    <html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I believe the code is the same, it has a symlink to provide the weird old namespace:<div><br></div><div><a href="https://salsa.debian.org/go-team/
    packages/golang-webpki-org-jsoncanonicalizer/-/blob/debian/latest/debian/golang-webpki-org-jsoncanonicalizer-dev.links?ref_type=heads">https://salsa.debian.org/go-team/packages/golang-webpki-org-jsoncanonicalizer/-/blob/debian/latest/debian/golang-webpki-
    org-jsoncanonicalizer-dev.links?ref_type=heads</a></div><div><br></div><div>There may better ways to do this, patches welcome :), but it works for several packages using this.</div><div><br></div><div>I don’t think we should have two packages with the
    same code.</div><div><br></div><div>/Simon</div><div><div dir="ltr"><br><blockquote type="cite">13 mars 2025 kl. 15:45 skrev Roland Mas &lt;lolando@debian.org&gt;:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>Le 13/03/2025 à
    15:22, Simon Josefsson a écrit&nbsp;:</span><br><blockquote type="cite"><span>Did you notice this package?</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>https://tracker.debian.org/pkg/golang-
    webpki-org-jsoncanonicalizer</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><span>Different one, or am I mistaken? I think apptainer depends on golang-github-cyberphone-json-canonicalization (at least, it's mentioned in the
    go.mod file).</span><br><span></span><br><span>I also noticed your inital packaging work before I spent too much time on mine, so I ditched mine and switched to yours. Updated and uploaded now. Thanks :-)</span><br><span></span><br><span>Roland.</span><
    <span></span><br></div></blockquote></div></body></html> --Apple-Mail-6C14544A-4B03-480E-A243-8691DA86DC46--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Roland Mas@21:1/5 to All on Thu Mar 13 16:10:01 2025
    Le 13/03/2025 à 15:51, Simon Josefsson a écrit :
    I believe the code is the same, it has a symlink to provide the weird
    old namespace:

    https://salsa.debian.org/go-team/packages/golang-webpki-org-jsoncanonicalizer/-/blob/debian/latest/debian/golang-webpki-org-jsoncanonicalizer-dev.links?ref_type=heads

    There may better ways to do this, patches welcome :), but it works for several packages using this.
    Maybe a Provides: would be useful then?
    I don’t think we should have two packages with the same code.

    Agreed. I'll recall my upload.

    Roland.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)