Bug 2404348 (rust-cms) - Review Request: rust-cms - Pure Rust implementation of the Cryptographic Message Syntax
Summary: Review Request: rust-cms - Pure Rust implementation of the Cryptographic Mess...
Keywords:
Status: CLOSED ERRATA
Alias: rust-cms
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Fabio Valentini
QA Contact: Fedora Extras Quality Assurance
URL: https://crates.io/crates/cms
Whiteboard:
Depends On:
Blocks: rust-authenticode
TreeView+ depends on / blocked
 
Reported: 2025-10-16 06:29 UTC by Gerd Hoffmann
Modified: 2026-02-05 16:38 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-02-05 00:59:34 UTC
Type: ---
Embargoed:
decathorpe: fedora-review+


Attachments (Terms of Use)
The .spec file difference from Copr build 9696628 to 9709488 (1.24 KB, patch)
2025-10-21 07:55 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 9709488 to 9991834 (812 bytes, patch)
2026-01-09 13:59 UTC, Fedora Review Service
no flags Details | Diff

Description Gerd Hoffmann 2025-10-16 06:29:55 UTC
Spec URL: https://download.copr.fedorainfracloud.org/results/kraxel/rust.misc/fedora-rawhide-x86_64/09691338-rust-cms/rust-cms.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/kraxel/rust.misc/fedora-rawhide-x86_64/09691338-rust-cms/rust-cms-0.2.3-1.fc44.src.rpm
Description: Pure Rust implementation of the Cryptographic Message Syntax (CMS) as
described in RFC 5652 and RFC 3274.
Fedora Account System Username: kraxel

Comment 1 Gerd Hoffmann 2025-10-16 06:30:57 UTC
https://github.com/RustCrypto/formats/pull/2069 [fix missing license files upstream]

Comment 2 Fedora Review Service 2025-10-17 00:13:54 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/9696628
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2404348-rust-cms/fedora-rawhide-x86_64/09696628-rust-cms/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 3 Gerd Hoffmann 2025-10-17 07:39:08 UTC
(In reply to Gerd Hoffmann from comment #1)
> https://github.com/RustCrypto/formats/pull/2069 [fix missing license files
> upstream]

Merged.

Comment 4 Gerd Hoffmann 2025-10-17 07:51:10 UTC
Hmm, rust2rpm checks for the license /before/ applying the patches, so adding https://github.com/RustCrypto/formats/commit/f76fafc9415b27f9756cfb7c4b7d43c9907b1380 via extra-patches in rust2rpm.toml does not work.

Comment 5 Ben Beasley 2025-10-18 09:43:38 UTC
(In reply to Gerd Hoffmann from comment #4)
> Hmm, rust2rpm checks for the license /before/ applying the patches, so
> adding
> https://github.com/RustCrypto/formats/commit/
> f76fafc9415b27f9756cfb7c4b7d43c9907b1380 via extra-patches in rust2rpm.toml
> does not work.

What you *can* do is add the license file from upstream as an extra source, like this:

https://src.fedoraproject.org/rpms/rust-fax/blob/c29503f7445d80da0c868ca48af81e69408afc3c/f/rust2rpm.toml

Comment 7 Fedora Review Service 2025-10-21 07:55:26 UTC
Created attachment 2110342 [details]
The .spec file difference from Copr build 9696628 to 9709488

Comment 8 Fedora Review Service 2025-10-21 07:55:28 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/9709488
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2404348-rust-cms/fedora-rawhide-x86_64/09709488-rust-cms/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 9 Fabio Valentini 2026-01-05 15:55:37 UTC
Looks like this now fails to build after the update to hex-literal v1 in Fedora.

You might need to apply a patch to bump the dependency from v0.4 to v1.

Comment 11 Fedora Review Service 2026-01-09 13:59:44 UTC
Created attachment 2121649 [details]
The .spec file difference from Copr build 9709488 to 9991834

Comment 12 Fedora Review Service 2026-01-09 13:59:46 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/9991834
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2404348-rust-cms/fedora-rawhide-x86_64/09991834-rust-cms/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 13 Fabio Valentini 2026-01-22 14:53:50 UTC
Package was generated with rust2rpm, simplifying the review.

Two minor issues that you can address before importing the package:

1. Exclude the test input data from the built packages (%exclude'ing "tests/examples" should be enough).
   The files under tests/examples/* are bigger than the rest of the crate sources combined. :)
2. Please regenerate the spec file, it should use rpmautospec (%autorelease / %autochangelog).

===

✅ package contains only permissible content
✅ package builds and installs without errors on rawhide
✅ test suite is run and all unit tests pass
✅ latest version of the crate is packaged
✅ license matches upstream specification and is acceptable for Fedora
🫤 license files are included with %license in %files
   Included manually from upstream,
   PR to include them in the next published version was submitted and already merged.
✅ package complies with Rust Packaging Guidelines
   -- with caveat about using rpmautospec.

Package APPROVED.

===

Recommended post-import rust-sig tasks:

- set up package on release-monitoring.org:
  project: $crate
  homepage: https://crates.io/crates/$crate
  backend: crates.io
  version scheme: semantic
  version filter (*NOT* pre-release filter): alpha;beta;rc;pre
  distro: Fedora
  Package: rust-$crate

- set bugzilla assignee overrides to @rust-sig (optional)

Comment 14 Fedora Admin user for bugzilla script actions 2026-01-27 10:50:29 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-cms

Comment 15 Fedora Update System 2026-01-27 12:39:12 UTC
FEDORA-2026-facd08d2c7 (rust-cms-0.2.3-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-facd08d2c7

Comment 16 Gerd Hoffmann 2026-01-27 12:43:16 UTC
> - set up package on release-monitoring.org:
>   project: $crate

Hmm, there is a name clash:
https://release-monitoring.org/project/377971/

Suggestions how to handle this?
Would be using 'rust-cms' as project name ok?

Comment 17 Fedora Update System 2026-01-28 01:09:17 UTC
FEDORA-2026-facd08d2c7 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf install --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-facd08d2c7 \*`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-facd08d2c7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 18 Fedora Update System 2026-02-05 00:59:34 UTC
FEDORA-2026-facd08d2c7 (rust-cms-0.2.3-1.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 19 Fabio Valentini 2026-02-05 16:38:01 UTC
(In reply to Gerd Hoffmann from comment #16)
> > - set up package on release-monitoring.org:
> >   project: $crate
> 
> Hmm, there is a name clash:
> https://release-monitoring.org/project/377971/
> 
> Suggestions how to handle this?
> Would be using 'rust-cms' as project name ok?

There are no clashes on the project "name" on release-monitoring.org, so you can use "cms".


Note You need to log in before you can comment on or make changes to this bug.