Proposal to retire perl-Crypt-RSA and its dependency chain

[Paul Howarth]

Now that we have (or will have shortly) fully CryptX-based versions of
perl-Net-SSH-Perl in F-36, F-37 and all EPELs, it looks to me that
there are no remaining dependents of perl-Crypt-RSA in Fedora (other
than the Suggests: for it in perl-Net-SSH-Perl, but I can get rid of
that in due course).

I'm seriously considering retiring the following group of packages,
which are only currently used by perl-Crypt-RSA as far as I can tell:

perl-Crypt-RSA
perl-Crypt-Primes
perl-Crypt-Random
perl-Math-Pari
libpari23

The last release of Crypt-RSA was in 2009. Dana Jacobsen created an
alternative implementation
(https://metacpan.org/dist/Alt-Crypt-RSA-BigInt) that avoided the need
for Math::Pari, which would be a big win itself, but that doesn't look
to have gained any traction.

I introduced all of these packages (except libpari23) to Fedora back in
2005 when I needed them as dependencies of perl-Net-SSH-Perl. The
libpari package followed in 2012 because perl-Math-Pari doesn't tend to
keep up with contemporary pari releases, and is quite painful to
package anyway. The perl-Net-SSH-Perl package no longer needs the other
ones, and neither do I.

Does anyone see any issues with retiring these packages in Fedora?

Regards, Paul.

[Paul Howarth]

On Wed, 23 Mar 2022 11:31:48 +0000
Paul Howarth <paul(a)city-fan.org&gt; wrote:

>  Now that we have (or will have shortly) fully CryptX-based versions
> of
>  perl-Net-SSH-Perl in F-36, F-37 and all EPELs, it looks to me that
>  there are no remaining dependents of perl-Crypt-RSA in Fedora (other
>  than the Suggests: for it in perl-Net-SSH-Perl, but I can get rid of
>  that in due course).
>  
>  I'm seriously considering retiring the following group of packages,
>  which are only currently used by perl-Crypt-RSA as far as I can tell:
>  
>  perl-Crypt-RSA
>  perl-Crypt-Primes
>  perl-Crypt-Random
>  perl-Math-Pari
>  libpari23
>  
>  The last release of Crypt-RSA was in 2009. Dana Jacobsen created an
>  alternative implementation
>  (https://metacpan.org/dist/Alt-Crypt-RSA-BigInt) that avoided the need
>  for Math::Pari, which would be a big win itself, but that doesn't look
>  to have gained any traction.
>  
>  I introduced all of these packages (except libpari23) to Fedora back
>  in 2005 when I needed them as dependencies of perl-Net-SSH-Perl. The
>  libpari package followed in 2012 because perl-Math-Pari doesn't tend
>  to keep up with contemporary pari releases, and is quite painful to
>  package anyway. The perl-Net-SSH-Perl package no longer needs the
>  other ones, and neither do I.
>  
>  Does anyone see any issues with retiring these packages in Fedora? 
Great, no comments received so I'm going to go ahead with the
retirement of these packages in Rawhide.

Paul.