Your message dated Fri, 02 Mar 2018 20:52:49 +0000 with message-id <e1errfd-000j5h...@fasolo.debian.org> and subject line Bug#891781: fixed in osslsigncode 1.7.1-3 has caused the Debian Bug report #891781, regarding osslsigncode: libcurl4-openssl-dev + libssl1.0-dev to become incompatible shortly to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 891781: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891781 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: osslsigncode Version: 1.7.1-2 Severity: important Tags: patch User: ubuntu-de...@lists.ubuntu.com Usertags: origin-ubuntu bionic ubuntu-patch Hi Stephen, libcurl is about to migrate from openssl1.0 to openssl 1.1 (bug #858398), at which point osslsigncode will again FTBFS because its two build-dependencies, libcurl4-openssl-dev and libssl1.0-dev, will no longer be co-installable. I've deployed a workaround for this in Ubuntu, which is to build-depend on libcurl4-gnutls-dev instead. Since gnutls is LGPL there is no license incompatibility due to switching, and osslsigncode doesn't pass opaque blobs between libssl and libcurl so there doesn't appear to be any requirement that curl be using the same library to implement TLS as osslsigncode is using to implement its signature management. Of course, the longer-term solution is to fix bug #828483, but as that may still be a way out, it might be good to have osslsigncode buildable in the near term. Cheers, -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer http://www.debian.org/ slanga...@ubuntu.com vor...@debian.orgdiff -Nru osslsigncode-1.7.1/debian/control osslsigncode-1.7.1/debian/control --- osslsigncode-1.7.1/debian/control 2017-06-20 03:13:18.000000000 -0700 +++ osslsigncode-1.7.1/debian/control 2018-02-28 12:05:34.000000000 -0800 @@ -3,7 +3,7 @@ Section: otherosfs Priority: optional Build-Depends: debhelper (>= 10), - libcurl4-openssl-dev, + libcurl4-gnutls-dev, libgsf-1-dev, libssl1.0-dev Standards-Version: 3.9.8
--- End Message ---
--- Begin Message ---Source: osslsigncode Source-Version: 1.7.1-3 We believe that the bug you reported is fixed in the latest version of osslsigncode, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 891...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Stephen Kitt <sk...@debian.org> (supplier of updated osslsigncode package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 02 Mar 2018 21:21:48 +0100 Source: osslsigncode Binary: osslsigncode Architecture: source Version: 1.7.1-3 Distribution: unstable Urgency: medium Maintainer: Stephen Kitt <sk...@debian.org> Changed-By: Stephen Kitt <sk...@debian.org> Description: osslsigncode - Authenticode signing tool Closes: 891781 Changes: osslsigncode (1.7.1-3) unstable; urgency=medium . * Actually fix debian/watch. * Build-depend on libcurl4-gnutls-dev to avoid build errors once libcurl4-openssl-dev switches to OpenSSL 1.1; thanks to Steve Langasek for the investigation and fix! Closes: #891781. * Switch to debhelper compatibility level 11. * Update debian/copyright. * Standards-Version 4.1.3, no further change required. Checksums-Sha1: 15265202e92509b5ea5f06d131ce3773b9ba41f1 1954 osslsigncode_1.7.1-3.dsc d126d466aa9e9ce6e1335a4272123be7d48ec1b3 2440 osslsigncode_1.7.1-3.debian.tar.xz 51b524c9701965e0f2f9e088742553beb62f3ca6 8553 osslsigncode_1.7.1-3_source.buildinfo Checksums-Sha256: b27c2372f732e4684f165076f6618b355a08609e291676d5d959fa995453940c 1954 osslsigncode_1.7.1-3.dsc fcdd24a42070ffe6073ef9f51e91c0651176b49e73eadf11d658eddbc032c541 2440 osslsigncode_1.7.1-3.debian.tar.xz 917be67436a8d8f6e39ceafa0f20a05c17982c41b3faaacc91803c36200b7c8a 8553 osslsigncode_1.7.1-3_source.buildinfo Files: 9894ffe1f982cf8b0eadb38a92f740be 1954 otherosfs optional osslsigncode_1.7.1-3.dsc 934859ba42720af41cdcfd4470529994 2440 otherosfs optional osslsigncode_1.7.1-3.debian.tar.xz adb139d1aeab0e14980c47828ccbfab8 8553 otherosfs optional osslsigncode_1.7.1-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnPVX/hPLkMoq7x0ggNMC9Yhtg5wFAlqZsmcACgkQgNMC9Yht g5y6ixAAnaGcaY2Z5ZJGr29QODg781N0LuzsEYc2Wtno6ZkY56m/QWSbo4bRc5NV ktTTbYDqbxyHNO2jNuitF+8i7qqXZ6u5UdsDPrlreve3e82hoBq9uNpFCQFTCCwC UCiG7R5FFWXTGLg6e+npWOy3cYza/B+qgUBBCeIrrIj/wyty4+cN1cU3fgBkcI67 sL0shK2pCF4N11nUFfHVp4G/c00Md1a5hC+vZu50Ye66C3gvx3Da0yx9ufZD+ylI seLLyhMFyX2D8rHNAqsscYDwDt14rxS4ad7MRIMPPIE9cr3KDW4CmNVfWxShzYAA LLIccf2ed/+BTR32XXOUkbB9k5UAqn+y5KXs8xSRA4+iIvuYk1UJcIeZVCaAPxBO TKqp0PGzLb+dBGTEGVrWtpymzYttRW2SpufnIVa/nz91RDaVP4JIXbxs9dTAd6Nq 0qAqyXirPQyU1HwE5WIK0QOdAUjqjaVKD2w4pwBciBiX0gtxHG2M+I8+t5537KIJ PfpaOlPTp6lNbwEsIQpmMdFPTqyTeejQLDUEWRBVkb7iYnQLOf+HF11O/dsju6Eh 5ssL8h7hkadq5p4eTHWmCL0AUzI7RP13lLOoKQpFj6S+HpNFSem+xtKFKS0FyXFg AU0QEfgmmIiLEq2HJNJG9We4i94FQe7HCnqL1qPqHamHA19NzI4= =/GG5 -----END PGP SIGNATURE-----
--- End Message ---
