Bug#1038812: Bug#1041409: thunderbird: OpenPGP features in v115 requires librnp0 >= 0.17.0 not in archive

2023-07-23 Thread Carsten Schoenert

Hello Daniel,

Am 22.07.23 um 19:49 schrieb Daniel Kahn Gillmor:

Control: block 1041409 by 1038812

Hi all--

Thanks for noticing this.  Putting rnp 0.17.0 in the archive will
require sexpp to land in the archive as well, but has been in in NEW for
a few weeks (see #1038812).


I've currently switched the build for Thunderbird to use the internal 
version of RNP so the usage of the PGP functions is available again and 
I plan to upload the current version of 115.0.1 later the day again to 
experimental. We still have a few FTBFS issues within some RC platforms 
to solve. Once these problems are gone I wanted to upload 115.x to unstable.


Maybe Thorsten can have a look at the package sexpp within the NEW queue?


   --dkg

On Tue 2023-07-18 19:06:58 +0200, Carsten Schoenert wrote:

Hi Alper,

Am 18.07.23 um 17:20 schrieb Alper Nebi Yasak:

I decided to upgrade Thunderbird to the version in experimental, and
noticed that its OpenPGP functionality is completely broken: the Key
Manager is empty, and it doesn't even attempt to decrypt/verify
encrypted/signed messages (at least over external gnupg).


ha, by accident I noticed the described behavior just a few hour ago too!
Thanks for trying out Thunderbird from experimental, I expect we will
find a few more glitches like that.


The "Troubleshooting Information" page says the expected minimum version
for the RNP library is 0.17.0, where I had 0.16.3-1 installed as
currently in unstable.


Unfortunately the Thunderbird build system does not do a really good job
on detecting required versions for libraries or equal. And it's mostly
difficult to detect such version bumps by reviewing manually changes
after importing a new version.


Seeing a 0.17.0~git20220428-1 version for librnp0 in experimental, I
tried installing that. But that doesn't work either, apparently its
source is older than 0.16.1? (Also see bug #1031363).

So I think Thunderbird needs to depend on librnp0 >= 0.17.0 (currently
unversioned), but no such version is in Debian yet. I got it to work by
sloppily packaging the newer source. (The proper package may take a bit,
has a new dependency apparently in NEW -- I'm CC-ing the maintainer.)


Your analysis is correct, Thunderbird will need a version constrain on
librnp0. But this requires the package to be available at least in
experimental.

I'll do some work around this and change the build system while
preparing the next upload so it is using the internal shipped librnp
version until Daniel has uploaded a newer version.

--
Regards
Carsten


--
Regards
Carsten



Bug#1038812: Bug#1041409: thunderbird: OpenPGP features in v115 requires librnp0 >= 0.17.0 not in archive

2023-07-22 Thread Daniel Kahn Gillmor
Control: block 1041409 by 1038812

Hi all--

Thanks for noticing this.  Putting rnp 0.17.0 in the archive will
require sexpp to land in the archive as well, but has been in in NEW for
a few weeks (see #1038812).

  --dkg

On Tue 2023-07-18 19:06:58 +0200, Carsten Schoenert wrote:
> Hi Alper,
>
> Am 18.07.23 um 17:20 schrieb Alper Nebi Yasak:
>> I decided to upgrade Thunderbird to the version in experimental, and
>> noticed that its OpenPGP functionality is completely broken: the Key
>> Manager is empty, and it doesn't even attempt to decrypt/verify
>> encrypted/signed messages (at least over external gnupg).
>
> ha, by accident I noticed the described behavior just a few hour ago too!
> Thanks for trying out Thunderbird from experimental, I expect we will 
> find a few more glitches like that.
>
>> The "Troubleshooting Information" page says the expected minimum version
>> for the RNP library is 0.17.0, where I had 0.16.3-1 installed as
>> currently in unstable.
>
> Unfortunately the Thunderbird build system does not do a really good job 
> on detecting required versions for libraries or equal. And it's mostly 
> difficult to detect such version bumps by reviewing manually changes 
> after importing a new version.
>
>> Seeing a 0.17.0~git20220428-1 version for librnp0 in experimental, I
>> tried installing that. But that doesn't work either, apparently its
>> source is older than 0.16.1? (Also see bug #1031363).
>> 
>> So I think Thunderbird needs to depend on librnp0 >= 0.17.0 (currently
>> unversioned), but no such version is in Debian yet. I got it to work by
>> sloppily packaging the newer source. (The proper package may take a bit,
>> has a new dependency apparently in NEW -- I'm CC-ing the maintainer.)
>
> Your analysis is correct, Thunderbird will need a version constrain on 
> librnp0. But this requires the package to be available at least in 
> experimental.
>
> I'll do some work around this and change the build system while 
> preparing the next upload so it is using the internal shipped librnp 
> version until Daniel has uploaded a newer version.
>
> -- 
> Regards
> Carsten


signature.asc
Description: PGP signature