[Pkg-giraffe-discuss] [Pkg-giraffe-maintainers] Bug#812969: libvmime: FTBFS: net_tls_TLSSession.cpp:120:38: error: 'gnutls_certificate_type_set_priority' was not declared in this scope

[Carsten Schoenert]

Hello Jelle,

Am 01.02.2016 um 22:09 schrieb Jelle van der Waa:
>> as maybe someone has noted the libvime package is currently failing to
>> build from source. See the bug opened mail by Chris Lamb at the end of
>> this email.
> 
> I always wondered why I didn't have this issue on Arch, turns out we
> use Zarafa's snapshot of libvmime and somehow the libvmime version is
> named 0.9.2. [1]
> Which raises some concerns here, since we ship a different vmime
> then Debian will :-(

Yes.
Debian will need a long term solution as we have to provide some
security support for the libvmime library later. And I'm quite unhappy
if we go with this old version 0.9.1 into the stretch release.

> I ran a diff between the two mentioned files and it still fails to
> compile, since the patch takes the harder approach to #ifdef everything
> between old and new it might be that your patch actually was already
> correct.
> 
> I can check your patch later, but I don't have that time now and
> just wanted to clarify the situation :)

no need for that as it would solve the compile issue but would also
enable the weal old cipher suits and key exchanges algos.

> [1] https://download.zarafa.com/community/final/7.1/7.1.7-42779/sourcecode/libvmime-0.9.2%2Bsvn603.tar.bz2
> 
> P.S. I think we (as Zarafa) have to be make contact with the
> libvmime guys and help them get a new release even if it's just some 
> patches ontop of 0.9.1. (Since now we run a snapshot + 10 custom
> patches..)

Yes please please do so!
We need a actual version of libvmime! As written on my email to Peter
Green, I can't really understand why there is no new release since 2010
by the background of the Snowden papers. Providing no security updates
will users switch to better handled packages.

-- 
Regards
Carsten Schoenert