[Pkg-utopia-maintainers] Bug#745955: Bug#745955: network-manager: Uses gcrypt functions without explicit gcrypt build-dependency

[Michael Biebl]

clone 745955 -1
retitle -1  "Use GnuTLS crypto API instead of gcrypt"
thanks

Am 17.05.2014 08:20, schrieb Andreas Metzler:
> On 2014-05-17 Michael Biebl <email at michaelbiebl.de> wrote:
>> Am 26.04.2014 20:01, schrieb Andreas Metzler:
>>> Package: network-manager
>>> Version: 0.9.8.8-7
> [...]
>>> Usertags: gnutls3
>  
>>> network-manager uses gcrypt directly (not only as an indirect dependency
>>> via gnutls) but does not build-depend on it.
> 
>> Hi Andreas,
>> could you tell me what I'm supposed to fix here and how this relates to
>> gnutls3?
> 
> Hello Michael,
> 
> I am sorry that report was too terse, let me give some background:
> 
> We want to transition to GnuTLS v3 ("gnutls28"). As part of this I have
> tried building all reverse (build-)dependencies of GnuTLSv2
> ("gnutls26") against gnutls28 (I locally added a libgnutls-dev
> packages which depends on libgnutls28-dev.) and submitted bugreports
> against all failing ones.
> 
> network-manager uses both gnutls and gcrypt. However it does not
> build-depend on libgcrypt11-dev or libgcrypt20-dev but instead relies
> on libgnutls-dev depending on libgcrypt11-dev. Since gnutls28 uses
> nettle instead of gcrypt as crypto backend this dependency is gone and
> network-manager FTBFS.
> 
> ---
> 
> How to fix this bug:
> The quickest way would be to simply add a b-d on libgcrypt11-dev.
> However what I would like to see is upgrading the b-d from
> libgnutls-dev to "libgnutls28-dev, libgcrypt20-dev | libgcrypt11-dev".
> 
> Obviously it is less than optimal that network-manager then depends on
> two crypto libraries (indirectly on nettle via gnutls, and gcrypt).
> This could be fixed by using the GnuTLS crypto API instead of
> gcrypt. It should not be very difficult for a programmer, but I cannot
> provide a patch since I am not a programmer.
> 

Ok, let's split this issue then. I'll add a libgcrypt11-dev dependency
with the next upload, closing #745955.

Porting to GnuTLS only API is more involved and I'll track this in a
cloned bug report.

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20140519/a110bf7e/attachment.sig>