Page MenuHomeFreeBSD

security/protonvpn-cli: Mark as deprecated
ClosedPublic

Authored by salvadore on Apr 27 2022, 7:19 PM.
Tags
None
Referenced Files
Unknown Object (File)
Feb 28 2024, 6:16 PM
Unknown Object (File)
Dec 25 2023, 3:03 AM
Unknown Object (File)
Dec 20 2023, 6:27 AM
Unknown Object (File)
Dec 1 2023, 6:53 PM
Unknown Object (File)
Nov 15 2023, 9:45 AM
Unknown Object (File)
Nov 5 2023, 10:13 PM
Unknown Object (File)
Oct 14 2023, 8:45 AM
Unknown Object (File)
Oct 4 2023, 9:12 PM
Subscribers

Details

Reviewers
gerald
tcberner
Summary

This version is deprecated and unsupported upstream. The port needs an update, but this might require a fair amount of time. In alternative to it, it is possibile to use OpenVPN or Wireguard with configuration files provided by ProtonVPN.

Diff Detail

Repository
rP FreeBSD ports repository
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 45415
Build 42303: arc lint + arc unit

Event Timeline

If it's unsupported upstream I'd suggest that you set expiration date and bring back the port if needed instead of having deprecated "placeholders" in tree.

If it's unsupported upstream I'd suggest that you set expiration date and bring back the port if needed instead of having deprecated "placeholders" in tree.

This version is indeed unsupported upstream, but the port still works, it can still be useful.

I read in the Porter's handbook:

It is possible to set DEPRECATED without an EXPIRATION_DATE (for instance, recommending a newer version of the port), but the converse does not make any sense.

Maybe I should make it clearer in the DEPRECATED message that the port works? I might have given the impression that the port is broken. Or should I set an expiration date anyway just as you suggested? In that case I would remove my adoption: I don't think it makes sense to adopt soon to be removed ports.

I would argue that it's bad practice to have unsupported security related software and if there's no clear timeline for updating in tree. It's "better" (from a security perspective) to deprecate and set a expiration date as it doesn't prevent anyone who's interested to update it within that date or bring it back later. As far as I can tell you can also do without the port just fine?

Edit: That's my take on it ;-)

I agree with you dizzy. Moreover, in my experience, software from this company is not easy at all to port, so I am unsure that I will ever succeed updating the port. I follow your advice.

Thanks you very much for your review.

salvadore retitled this revision from security/protonvpn-cli: Take maintainership again to security/protonvpn-cli: Mark as deprecated.Apr 28 2022, 4:13 PM
salvadore edited the summary of this revision. (Show Details)

Some minor suggestions for the actual text (and as you mentioned out of band you'll adjust the date bit).

security/protonvpn-cli/Makefile
16

We can simplify this to "which would require a fair amount of effort". (Well, not really simpler, though avoiding the "but" and being more affirmative.)

And then "Use OpenVPN or Wireguard with ... instead.", which is more from the user perspective.

This revision is now accepted and ready to land.May 10 2022, 7:24 AM

I would set the deprecation dates close to the end of a quarter.

Sorry, I forgot to add the differential review link to the commit message.
So I close the review manually.

Here is the link to the commit for anyone interested:
https://reviews.freebsd.org/R11:e8af334ea352

I made the fixes suggested by @gerald and moved forward the expiration date to 2022-06-25, close to the end of the quarter as suggested by @tcberner.