Retiring: python-sendgrid

[Ali Erdinc Koroglu]

Dear maintainers,
Python-sendgrid [1] will be retiring after F37, because since v6.4.1 it 
depends to starkbank-ecdsa [2] which we can't add to Fedora
due to secp256k1 elliptic curve support.

1 : https://github.com/sendgrid/sendgrid-python
2 : https://github.com/starkbank/ecdsa-python

BR,
Ali
---------------------------------------------------------------------
Intel Finland Oy
Registered Address: PL 281, 00181 Helsinki 
Business Identity Code: 0357606 - 4 
Domiciled in Helsinki 

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.

[Miro Hrončok]

On 25. 08. 22 14:42, Ali Erdinc Koroglu wrote:
>  Dear maintainers,
>  Python-sendgrid [1] will be retiring after F37, because since v6.4.1 it depends 
>  to starkbank-ecdsa [2] which we can't add to Fedora
>  due to secp256k1 elliptic curve support. 
Clarification: We don't *know* if we can include it :(

https://lists.fedoraproject.org/archives/list/[e-mail].o...

-- 
Miro Hrončok
-- 
Phone: [phone]
IRC: mhroncok

[Chris Adams]

Once upon a time, Ali Erdinc Koroglu <ali.erdinc.koroglu(a)intel.com&gt; said:
>  Dear maintainers,
>  Python-sendgrid [1] will be retiring after F37, because since v6.4.1
>  it depends to starkbank-ecdsa [2] which we can't add to Fedora
>  due to secp256k1 elliptic curve support. 
What's wrong with secp256k1?  Fedora already has libsecp256k1, so it
doesn't appear that curve is blocked.

-- 
Chris Adams <linux(a)cmadams.net&gt;

[Fabio Valentini]

On Thu, Aug 25, 2022 at 2:49 PM Chris Adams <linux(a)cmadams.net&gt; wrote:
>  Once upon a time, Ali Erdinc Koroglu <ali.erdinc.koroglu(a)intel.com&gt; said:
>  > Dear maintainers,
>  > Python-sendgrid [1] will be retiring after F37, because since v6.4.1
>  > it depends to starkbank-ecdsa [2] which we can't add to Fedora
>  > due to secp256k1 elliptic curve support.
>
>  What's wrong with secp256k1?  Fedora already has libsecp256k1, so it
>  doesn't appear that curve is blocked. 
I seem to remember that there was a Fedora Legal Wiki page that listed
the elliptic curves that Fedora was not allowed to ship, but I can't
find it anywhere, so maybe it fell victim to the move to GitLab and
Fedora Docs (as did some other useful docs ...).

But secp256k1 in particular seems to be OK, it is shipped by both
nettle and OpenSSL:

$ openssl ecparam -list_curves
  secp224r1 : NIST/SECG curve over a 224 bit prime field
  secp256k1 : SECG curve over a 256 bit prime field
  secp384r1 : NIST/SECG curve over a 384 bit prime field
  secp521r1 : NIST/SECG curve over a 521 bit prime field
  prime256v1: X9.62/SECG curve over a 256 bit prime field

Fabio

[Otto Liljalaakso]

Fabio Valentini kirjoitti 25.8.2022 klo 16.01:
>  On Thu, Aug 25, 2022 at 2:49 PM Chris Adams <linux(a)cmadams.net&gt;
> wrote:
> >
> > Once upon a time, Ali Erdinc Koroglu <ali.erdinc.koroglu(a)intel.com&gt; said:
> >> Dear maintainers,
> >> Python-sendgrid [1] will be retiring after F37, because since v6.4.1
> >> it depends to starkbank-ecdsa [2] which we can't add to Fedora
> >> due to secp256k1 elliptic curve support.
> >
> > What's wrong with secp256k1?  Fedora already has libsecp256k1, so it
> > doesn't appear that curve is blocked.
>  
>  I seem to remember that there was a Fedora Legal Wiki page that listed
>  the elliptic curves that Fedora was not allowed to ship, but I can't
>  find it anywhere, so maybe it fell victim to the move to GitLab and
>  Fedora Docs (as did some other useful docs ...). 
Do you mean this page, that lists ones that *are* allowed?
secp256k1 is on the list.

https://fedoraproject.org/wiki/Legal:ECC

[Vitaly Zaitsev]

On 25/08/2022 14:42, Ali Erdinc Koroglu wrote:
>  which we can't add to Fedora due to secp256k1 elliptic curve
> support 
Fedora already has secp256k1:

$ openssl ecparam -list_curves | grep 256k1
   secp256k1 : SECG curve over a 256 bit prime field

-- 
Sincerely,
   Vitaly Zaitsev (vitaly(a)easycoding.org)