Bug#828252: qtcreator is marked for autoremoval from testing

[Lisandro Damián Nicanor Pérez Meyer]

On martes, 8 de noviembre de 2016 00:27:22 ART Christian Hofstaedtler wrote:
> Ondřej,
> 
> * Ondřej Surý  [161106 21:12]:
> > In the end it was very easy (hopefully) - the OpenSSL module is optional
> > and hopefully this won't break anything :). Ccing other botan1.10 users.
> > 
> > Please test with botan1.10 - 1.10.13-1 that just got uploaded to
> > unstable.
> 
> Tested pdns 4.0.1-5 against the new botan1.10 1.10.13-1 and can
> confirm that pdns still works (without rebuilding).

Same goes for Qt Creator without rebuilding, I have been using it without 
issues so far.


-- 
2: Windows con las funciones que realiza se clasifica como:
* Un bug
Damian Nadales
http://mx.grulic.org.ar/lurker/message/20080307.141449.a70fb2fc.es.html

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Bug#828252: qtcreator is marked for autoremoval from testing

[Christian Hofstaedtler]

Ondřej,

* Ondřej Surý  [161106 21:12]:
> In the end it was very easy (hopefully) - the OpenSSL module is optional
> and hopefully this won't break anything :). Ccing other botan1.10 users.
> 
> Please test with botan1.10 - 1.10.13-1 that just got uploaded to
> unstable.

Tested pdns 4.0.1-5 against the new botan1.10 1.10.13-1 and can
confirm that pdns still works (without rebuilding).

Thanks for taking care of this.

Cheers,
-- 
 ,''`.  Christian Hofstaedtler 
: :' :  Debian Developer
`. `'   7D1A CFFA D9E0 806C 9C4C  D392 5C13 D6DB 9305 2E03
  `-

Bug#828252: qtcreator is marked for autoremoval from testing

[Lisandro Damián Nicanor Pérez Meyer]

On domingo, 6 de noviembre de 2016 21:12:14 ART Ondřej Surý wrote:
> In the end it was very easy (hopefully) - the OpenSSL module is optional
> and hopefully this won't break anything :). Ccing other botan1.10 users.
> 
> Please test with botan1.10 - 1.10.13-1 that just got uploaded to
> unstable.

Hi Ondřej! Will check for sure!


-- 
Una sola bomba nuclear puede arruinar el resto de tu día.

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Bug#828252: qtcreator is marked for autoremoval from testing

[Ondřej Surý]

In the end it was very easy (hopefully) - the OpenSSL module is optional
and hopefully this won't break anything :). Ccing other botan1.10 users.

Please test with botan1.10 - 1.10.13-1 that just got uploaded to
unstable.

Cheers,
-- 
Ondřej Surý 
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware,
fast DNS(SEC) resolver
Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro
pečení chleba všeho druhu

On Thu, Oct 27, 2016, at 21:20, Adam Majer wrote:
> On 27/10/16 09:59 AM, Ondřej Surý wrote:
> > I can probably generate two sets of packages with versioned symbols
> > if I have some help with that.
> >
> > Cheers,
> >
> 
> Yes, but this will not help and I'm not sure it is required since 
> OpenSSL is versioned already.
> 
> The problem is that Qt5 is using dlopen for OpenSSL. Versioned symbols 
> are not used with dlopen as is so we are SOL. Either Qt5 needs to be 
> linked directly against OpenSSL, or Qt5 needs to use symbols from old 
> OpenSSL library.
> 
> And now I'm looking at Qt source, and it looks like for Qt5 it is 
> possible to specify SHLIB version number for OpenSSL. see
> 
> qtbase/src/network/ssl/qsslsocket_openssl_symbols.cpp line 653
> 
> which means it *may be* possible to have multiple OpenSSL versions 
> installed and have Qt use only the old version. But this needs to be 
> tested with some test application to make sure correct functions are 
> actually called.
> 
> SHLIB_VERSION_NUMBER = 1.0.2
> 
> during compilation of Qt maybe all that is required to keep Qt crypto 
> support working in a mixed environment.
> 
> - Adam

Bug#828252: qtcreator is marked for autoremoval from testing

[Adam Majer]

On 27/10/16 09:59 AM, Ondřej Surý wrote:

I can probably generate two sets of packages with versioned symbols
if I have some help with that.

Cheers,



Yes, but this will not help and I'm not sure it is required since 
OpenSSL is versioned already.


The problem is that Qt5 is using dlopen for OpenSSL. Versioned symbols 
are not used with dlopen as is so we are SOL. Either Qt5 needs to be 
linked directly against OpenSSL, or Qt5 needs to use symbols from old 
OpenSSL library.


And now I'm looking at Qt source, and it looks like for Qt5 it is 
possible to specify SHLIB version number for OpenSSL. see


   qtbase/src/network/ssl/qsslsocket_openssl_symbols.cpp line 653

which means it *may be* possible to have multiple OpenSSL versions 
installed and have Qt use only the old version. But this needs to be 
tested with some test application to make sure correct functions are 
actually called.


SHLIB_VERSION_NUMBER = 1.0.2

during compilation of Qt maybe all that is required to keep Qt crypto 
support working in a mixed environment.


- Adam

Bug#828252: qtcreator is marked for autoremoval from testing

[Lisandro Damián Nicanor Pérez Meyer]

On jueves, 27 de octubre de 2016 4:59:39 P. M. ART Ondřej Surý wrote:
> I can probably generate two sets of packages with versioned symbols
> if I have some help with that.

That would be *very* kind of you! But before going ahead we might better 
contact the release team and see what they prefer here.


-- 
La ciencia sin la religión es renga, la religión sin la ciencia es ciega.
 Albert Einstein

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Bug#828252: qtcreator is marked for autoremoval from testing

[Lisandro Damián Nicanor Pérez Meyer]

On jueves, 27 de octubre de 2016 4:48:33 P. M. ART Ondřej Surý wrote:
> So is there an option to not switch to openssl 1.1.0 for stretch?

I was recently told something along that, but the problem is not easy 
actually. Some people might need botan switched, some not.

And we are to expect crashes if apps mix them :-/

-- 
10: El procesador de textos es:
* Un programa que le da vida a una computadora haciendo que
intente dominar el mundo (ver pregunta 1)
Damian Nadales
http://mx.grulic.org.ar/lurker/message/20080307.141449.a70fb2fc.es.html

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Bug#828252: qtcreator is marked for autoremoval from testing

[Ondřej Surý]

I can probably generate two sets of packages with versioned symbols
if I have some help with that.

Cheers,
-- 
Ondřej Surý 
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware,
fast DNS(SEC) resolver
Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro
pečení chleba všeho druhu

On Thu, Oct 27, 2016, at 16:55, Lisandro Damián Nicanor Pérez Meyer
wrote:
> On jueves, 27 de octubre de 2016 4:48:33 P. M. ART Ondřej Surý wrote:
> > So is there an option to not switch to openssl 1.1.0 for stretch?
> 
> I was recently told something along that, but the problem is not easy 
> actually. Some people might need botan switched, some not.
> 
> And we are to expect crashes if apps mix them :-/
> 
> -- 
> 10: El procesador de textos es:
> * Un programa que le da vida a una computadora haciendo que
> intente dominar el mundo (ver pregunta 1)
> Damian Nadales
> http://mx.grulic.org.ar/lurker/message/20080307.141449.a70fb2fc.es.html
> 
> Lisandro Damián Nicanor Pérez Meyer
> http://perezmeyer.com.ar/
> http://perezmeyer.blogspot.com/
> Email had 1 attachment:
> + signature.asc
>   1k (application/pgp-signature)

Bug#828252: qtcreator is marked for autoremoval from testing

[Lisandro Damián Nicanor Pérez Meyer]

For what is wort Qt5 won't be switching to libssl 1.1, so if botan gets 
updated we will have to remove qtcreator from testing.

On jueves, 27 de octubre de 2016 4:40:03 A. M. ART Debian testing autoremoval 
watch wrote:
> qtcreator 4.1.0-2 is marked for autoremoval from testing on 2016-11-25
> 
> It (build-)depends on packages with these RC bugs:
> 828252: botan1.10: FTBFS with openssl 1.1.0


-- 
~/ sweet ~/

Lisandro Damián Nicanor Pérez Meyer
http://perezmeyer.com.ar/
http://perezmeyer.blogspot.com/


signature.asc
Description: This is a digitally signed message part.

Bug#828252: qtcreator is marked for autoremoval from testing

[Ondřej Surý]

So is there an option to not switch to openssl 1.1.0 for stretch?

Cheers,
-- 
Ondřej Surý 
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware,
fast DNS(SEC) resolver
Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro
pečení chleba všeho druhu

On Thu, Oct 27, 2016, at 16:33, Lisandro Damián Nicanor Pérez Meyer
wrote:
> For what is wort Qt5 won't be switching to libssl 1.1, so if botan gets 
> updated we will have to remove qtcreator from testing.
> 
> On jueves, 27 de octubre de 2016 4:40:03 A. M. ART Debian testing
> autoremoval 
> watch wrote:
> > qtcreator 4.1.0-2 is marked for autoremoval from testing on 2016-11-25
> > 
> > It (build-)depends on packages with these RC bugs:
> > 828252: botan1.10: FTBFS with openssl 1.1.0
> 
> 
> -- 
> ~/ sweet ~/
> 
> Lisandro Damián Nicanor Pérez Meyer
> http://perezmeyer.com.ar/
> http://perezmeyer.blogspot.com/
> Email had 1 attachment:
> + signature.asc
>   1k (application/pgp-signature)