Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 490052 - dev-python/passlib should depend on dev-python/py-bcrypt
Summary: dev-python/passlib should depend on dev-python/py-bcrypt
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Development (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Matthew Thode ( prometheanfire )
URL: http://pythonhosted.org/passlib/lib/p...
Whiteboard:
Keywords:
Depends on: CVE-2013-1895
Blocks:
  Show dependency tree
 
Reported: 2013-11-01 16:28 UTC by René 'Necoro' Neumann
Modified: 2013-11-18 02:51 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description René 'Necoro' Neumann 2013-11-01 16:28:26 UTC
passlib supports bcrypt (cf URL), but needs an additional library for it, as the internal python implementation is too slow. The homepage lists three alternatives, but only one of them is feasible: dev-python/py-bcrypt. Hence, the package should depend on it, perhaps shielded by a 'bcrypt'-useflag (not sure about it).

For completeness' sake: The other options are bcryptor (not in portage) and support in crypt.crypt() (not existing).
Comment 1 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2013-11-01 18:03:59 UTC
I'll add py-bcrypt to tree (most likely) and support it as a hard dep (since bcrypt is probably a good thing to force imo (as bad as that sounds)).
Comment 2 René 'Necoro' Neumann 2013-11-01 18:12:12 UTC
Please note that py-bcrypt already is in the tree (though it really needs a bump -- see bug #488228)
Comment 3 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2013-11-01 18:15:52 UTC
that works too
Comment 4 Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2013-11-18 02:51:08 UTC
done :D