Package: osslsigncode
Version: 1.7.1-2
Severity: important
Tags: patch
User: [email protected]
Usertags: origin-ubuntu bionic ubuntu-patch
Hi Stephen,
libcurl is about to migrate from openssl1.0 to openssl 1.1 (bug #858398), at
which point osslsigncode will again FTBFS because its two
build-dependencies, libcurl4-openssl-dev and libssl1.0-dev, will no longer
be co-installable.
I've deployed a workaround for this in Ubuntu, which is to build-depend on
libcurl4-gnutls-dev instead. Since gnutls is LGPL there is no license
incompatibility due to switching, and osslsigncode doesn't pass opaque blobs
between libssl and libcurl so there doesn't appear to be any requirement
that curl be using the same library to implement TLS as osslsigncode is
using to implement its signature management.
Of course, the longer-term solution is to fix bug #828483, but as that may
still be a way out, it might be good to have osslsigncode buildable in the
near term.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
[email protected] [email protected]
diff -Nru osslsigncode-1.7.1/debian/control osslsigncode-1.7.1/debian/control
--- osslsigncode-1.7.1/debian/control 2017-06-20 03:13:18.000000000 -0700
+++ osslsigncode-1.7.1/debian/control 2018-02-28 12:05:34.000000000 -0800
@@ -3,7 +3,7 @@
Section: otherosfs
Priority: optional
Build-Depends: debhelper (>= 10),
- libcurl4-openssl-dev,
+ libcurl4-gnutls-dev,
libgsf-1-dev,
libssl1.0-dev
Standards-Version: 3.9.8
