Package Details: roundcubemail-plugin-carddav 4.1.1-1

Git Clone URL: https://aur.archlinux.org/roundcubemail-plugin-carddav.git (read-only, click to copy)
Package Base: roundcubemail-plugin-carddav
Description: CardDAV plugin for RoundCube Webmailer
Upstream URL: https://github.com/mstilkerich/rcmcarddav
Licenses: GPL2
Conflicts: roundcube-rcmcarddav, roundcube-rcmcarddav-git, roundcubemail-plugin-carddav-git
Replaces: roundcube-rcmcarddav
Submitter: AlphaJack
Maintainer: AlphaJack
Last Packager: AlphaJack
Votes: 2
Popularity: 0.023148
First Submitted: 2020-08-30 21:48
Last Updated: 2021-03-21 09:45

Latest Comments

AlphaJack commented on 2021-03-06 10:14

@RoKoInfo Thank you for the report, I changed the PKGBUILD accordingly

RoKoInfo commented on 2021-03-06 08:54

Hello AlphaJack, the update is not working for me right now. blind-coder gets forwarded to mstilkerich, and the release file there has a different file ending (.tar.gz instead of .tgz).

cgirard commented on 2021-02-13 17:39

Hi, it is missing the systemd makedepends for http user/group.

AlphaJack commented on 2020-12-03 15:23

@dvzrv I've switched all my packages to SHA256, however MD5 seems to be fine as download checksum

dvzrv commented on 2020-11-03 21:42

@AlphaJack: MD5 is broken and so is SHA1.

dvzrv commented on 2020-11-03 21:39

@AlphaJack: The license file for GPL2 is already in the licenses packages. You don't have to install it.

AlphaJack commented on 2020-11-03 21:39

@dvzrv Thank you, I've modified the functions accordingly and added the old package in the replaces array. Are there security concerns with the md5sum hashing algorithm, regarding file integrity (and not password storage)?

dvzrv commented on 2020-11-03 09:17

@Alphajack: Thanks for picking up the plugin stuff!

A couple of notes on your PKGBUILD:

Please build things with composer in build(), not in package(). Modify the sources before build() (e.g. when using sed) in prepare() not in package(). Use more secure hashing algorithms (e.g. sha265sums, sha512sums, b2sums - you can use multiple!).

Modify file permissions and ownership using sysusers.d. It is more flexible and less dangerous than applying this in package() or an .install script.

P.S.: I will remove roundcube-rmcarddav so you can add that to the replaces array as well!