Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
Control: tags -1 pending confirmed Hi Andreas, 2014-05-11 20:41 GMT+02:00 Andreas Metzler ametz...@bebt.de: On 2014-05-11 Bálint Réczey bal...@balintreczey.hu wrote: 2014-05-10 14:52 GMT+02:00 Andreas Metzler ametz...@bebt.de: [...] That used to be the case but is fixed now. GnuTLS 3 depends directly and indirectly via nettle on GMP. GPM was LGPLv3+ but is dual-licensed GPLv2+/LGPLv3+ since version 6.0.0. GnuTLS 3 continues to be available under LGPLv2.1+ Sounds OK. Please upload a usable GnuTLS 3 package to backports after it hits testing to let me provide backports for Wireshark depending on it. Hello Bálint, the GnuTLS 3 package in bpo is fully /functional/ however there is currently no GMP backport, i.e. if GnuTLS 3 in bpo currently only works for LGPLv3+ compatible code. I am also not sure that it is a great idea to upload gmp to bpo, I am afraid of subtile issues like https://bugs.debian.org/743087. OTOH not having a GMP backport will cause license breakage. Oh well. I will make the switch in next upload to unstable and stay with GnuTLS 2 in bpo. Cheers, Balint -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
Hi Andreas, 2014-05-10 14:52 GMT+02:00 Andreas Metzler ametz...@bebt.de: On 2014-05-10 Evan Huus eapa...@gmail.com wrote: On Sat, May 10, 2014 at 3:10 AM, Andreas Metzler ametz...@bebt.de wrote: Package: wireshark [...] This package uses gcrypt directly (not only as an indirect dependency via gnutls) but does not build-depend on it. In the long turn it would be better to switch from gcrypt to gnutls' crypto API, to limit external depencies. (GnuTLS v3 uses nettle instead of gcrypt.) FWIW I have done a successful testbuild of wireshark against libgnutls28-dev (and even libgcrypt20-dev). Please consider upgrading. If I recall correctly, Wireshark cannot currently be upgraded to GnuTLS v3 for license reasons; it is or creates a dependency on GPL3+ code while Wireshark needs to remain GPL2+. Hello Evan. That used to be the case but is fixed now. GnuTLS 3 depends directly and indirectly via nettle on GMP. GPM was LGPLv3+ but is dual-licensed GPLv2+/LGPLv3+ since version 6.0.0. GnuTLS 3 continues to be available under LGPLv2.1+ Sounds OK. Please upload a usable GnuTLS 3 package to backports after it hits testing to let me provide backports for Wireshark depending on it. Cheers, Balint -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
On 2014-05-11 Bálint Réczey bal...@balintreczey.hu wrote: 2014-05-10 14:52 GMT+02:00 Andreas Metzler ametz...@bebt.de: [...] That used to be the case but is fixed now. GnuTLS 3 depends directly and indirectly via nettle on GMP. GPM was LGPLv3+ but is dual-licensed GPLv2+/LGPLv3+ since version 6.0.0. GnuTLS 3 continues to be available under LGPLv2.1+ Sounds OK. Please upload a usable GnuTLS 3 package to backports after it hits testing to let me provide backports for Wireshark depending on it. Hello Bálint, the GnuTLS 3 package in bpo is fully /functional/ however there is currently no GMP backport, i.e. if GnuTLS 3 in bpo currently only works for LGPLv3+ compatible code. I am also not sure that it is a great idea to upload gmp to bpo, I am afraid of subtile issues like https://bugs.debian.org/743087. OTOH not having a GMP backport will cause license breakage. Oh well. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
Package: wireshark Version: 1.10.7-1 Severity: normal User: ametz...@debian.org Usertags: gnutls3 Hello, This package uses gcrypt directly (not only as an indirect dependency via gnutls) but does not build-depend on it. In the long turn it would be better to switch from gcrypt to gnutls' crypto API, to limit external depencies. (GnuTLS v3 uses nettle instead of gcrypt.) FWIW I have done a successful testbuild of wireshark against libgnutls28-dev (and even libgcrypt20-dev). Please consider upgrading. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
If I recall correctly, Wireshark cannot currently be upgraded to GnuTLS v3 for license reasons; it is or creates a dependency on GPL3+ code while Wireshark needs to remain GPL2+. Evan On Sat, May 10, 2014 at 3:10 AM, Andreas Metzler ametz...@bebt.de wrote: Package: wireshark Version: 1.10.7-1 Severity: normal User: ametz...@debian.org Usertags: gnutls3 Hello, This package uses gcrypt directly (not only as an indirect dependency via gnutls) but does not build-depend on it. In the long turn it would be better to switch from gcrypt to gnutls' crypto API, to limit external depencies. (GnuTLS v3 uses nettle instead of gcrypt.) FWIW I have done a successful testbuild of wireshark against libgnutls28-dev (and even libgcrypt20-dev). Please consider upgrading. cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure'
Bug#747578: wireshark: Uses gcrypt functions without explicit gcrypt build-dependency
On 2014-05-10 Evan Huus eapa...@gmail.com wrote: On Sat, May 10, 2014 at 3:10 AM, Andreas Metzler ametz...@bebt.de wrote: Package: wireshark [...] This package uses gcrypt directly (not only as an indirect dependency via gnutls) but does not build-depend on it. In the long turn it would be better to switch from gcrypt to gnutls' crypto API, to limit external depencies. (GnuTLS v3 uses nettle instead of gcrypt.) FWIW I have done a successful testbuild of wireshark against libgnutls28-dev (and even libgcrypt20-dev). Please consider upgrading. If I recall correctly, Wireshark cannot currently be upgraded to GnuTLS v3 for license reasons; it is or creates a dependency on GPL3+ code while Wireshark needs to remain GPL2+. Hello Evan. That used to be the case but is fixed now. GnuTLS 3 depends directly and indirectly via nettle on GMP. GPM was LGPLv3+ but is dual-licensed GPLv2+/LGPLv3+ since version 6.0.0. GnuTLS 3 continues to be available under LGPLv2.1+ cu Andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.' `I sew his ears on from time to time, sure' -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
