JWT C Library https://github.com/benmcollins/libjwt JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties. Asterisk devs are adding libjwt package depends for "for the next releases of Asterisk 18 and 20 and the first release of Asterisk 21." https://www.mail-archive.com/asterisk-dev@lists.digium.com/msg46307.html
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fd5269b1c8bbe9c823a7642bde1345f476ceb7be commit fd5269b1c8bbe9c823a7642bde1345f476ceb7be Author: Nic Boet <nic@boet.cc> AuthorDate: 2023-10-11 04:24:31 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-03-19 09:58:53 +0000 dev-libs/libjwt: 1.15.3 Nic: Package merged from oubliette-overlay https://github.com/nabbi/oubliette-overlay/tree/master/dev-libs/libjwt Jaco <jaco@uls.co.za> reached out regarding new Asterisk releases depending on libjwt Bill <dek.devel@baisenvar.info> originally supplied, along with the patch, for Zoneminder builds The three of us agreed to proxy-maintain until a more suitable owner is found. Hopefully this all makes sense, yet I suspect we missed something :D Jaco: Needs bump to 1.16.0 (configure patch doesn't apply). Didn't commit -9999 due to patch not applying, will bring back when I get 1.16.0 working. Signed-off-by: Jaco Kroon <jaco@uls.co.za> Signed-off-by: Nic Boet <nic@boet.cc> Closes: https://bugs.gentoo.org/915565 Closes: https://github.com/gentoo/gentoo/pull/35189 Signed-off-by: Sam James <sam@gentoo.org> dev-libs/libjwt/Manifest | 1 + .../files/libjwt-1.13.1_multi_ssl_atools.patch | 233 ++++++++++++++ .../files/libjwt-1.15.3_multi_ssl_atools.patch | 342 ++++++++++++++++++++ .../files/libjwt-1.16.0_multi_ssl_atools.patch | 348 +++++++++++++++++++++ dev-libs/libjwt/libjwt-1.15.3.ebuild | 68 ++++ dev-libs/libjwt/metadata.xml | 26 ++ 6 files changed, 1018 insertions(+)
I assume that "Needs bump to 1.16.0" is meant to read Needs bump to 1.17.0 (version 1.16.0 should be dropped): The 1.16.0 ebuild I submitted to oubliette-overlay was UN-keyworded due to upstream saying it has test failures with openssl (but local testing indicated the test failures were happening with gnutls not openssl) https://github.com/benmcollins/libjwt/issues/179#issuecomment-1645544131 I will make some time between Friday - Sunday to update autotools-patch to 1.17.0
Thanks for that, I didn't see a 1.17.0 (I note it was released in Feb) when I checked so I have to assume that it was released post me making that comment, so for now we have 1.15.3. This will allow asterisk to make progress, and yea, a bump for 1.17.0 would be welcome. Would have to separate test asterisk against that anyway. Thanks Bill. Appreciate, at your convenience. I don't think there is a security kind of rush on this as things stand, so all good.
