Shibboleth-SP 3.0.4 update

[Etienne Dysli Metref]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 13/03/2019 16.38, Cantor, Scott wrote:
>> BTW, I'd like to figure out how to contribute these packages to 
>> Ubuntu directly, but so far I don't understand their process. If 
>> someone knows, please enlighten me.
> 
> Since you mention it, Wisconsin asked me to somehow "fix" some
> sort of logjam with Ubuntu's packages that are a result of the 
> libcurl/openssl ABI split issue that arises due to them moving to 
> OpenSSL 1.1 and being stuck on SP 2 packages that don't work with 
> OpenSSL 1.1.
> 
> My issue is I don't know who, if anybody, is actually maintaining 
> those packages, and have never communicated with whomever that may 
> be, so I don't know what the issues are. I figured as with Debian 
> there may just be timing and scheduling problems that make getting 
> compatible code into a particular release impractical, which
> doesn't help Wisconsin, but at least it would be an answer.

Yeah that one:
https://bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/1776489. The
result is Shibboleth conflicts with about every other Apache module
and is uninstallable together with PHP, for example. This is the most
apparent and painful issue to date (beside security fixes being
ignored)... Pretty good for a LTS release, isn't it? ;P

Now who is maintaining Shibboleth packages in Ubuntu? Since they are
in "universe", officially it's "the community", not Canonical. There
doesn't seem to be one person in particular looking after them.
However, there is interest out there for better Ubuntu packages: I've
been contacted by someone from REANNZ who is considering setting up
their own package repository for Ubuntu because they'd like to have
faster updates than what I can provide at the moment. Rather than
having separate unofficial repositories, I think it would be much
better to contribute to Ubuntu directly.

Ferenc, do you think we could use the Git repositories on salsa to
package for Ubuntu (under a `ubuntu/` branch namespace) or would that
be too messy?

  Etienne
-----BEGIN PGP SIGNATURE-----
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=3U7A
-----END PGP SIGNATURE-----