Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-21 Thread Fabian Greffrath
Am 20.01.2010 19:25, schrieb Frank Lahm: I kindly suggest you compare --with-openssl-dir against --with-ssl-dir char by char. Sorry, you are right, my fault. I just couldn't see what you wanted to tell us in your last mail. ;) Fabian -- Dipl.-Phys. Fabian Greffrath

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-21 Thread Fabian Greffrath
Am 20.01.2010 18:21, schrieb Jonas Smedegaard: Changing to --without-ssl-dir (i.e. s/openssl/ssl/ works, however. Confirmed to work with --with-ssl-dir=no. - Fabian -- Dipl.-Phys. Fabian Greffrath Ruhr-Universität Bochum Lehrstuhl für Energieanlagen und Energieprozesstechnik (LEAT)

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-21 Thread Fabian Greffrath
As an additional security measure maybe a check like the one attached could be added to debian/rules (roughly taken from the vlc package to make sure no plugin in the vlc-nox package is linked against libX11). - Fabian --- netatalk-2.0.5.orig/debian/rules +++ netatalk-2.0.5/debian/rules @@

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-21 Thread Jonas Smedegaard
On Thu, Jan 21, 2010 at 10:59:49AM +0100, Fabian Greffrath wrote: As an additional security measure maybe a check like the one attached could be added to debian/rules (roughly taken from the vlc package to make sure no plugin in the vlc-nox package is linked against libX11). Excellent

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Fabian Greffrath
Package: netatalk Version: 2.0.5-2 Severity: important Holger Levsen: how about the compromise and doing both, except that for (1) we file the bugs with severity important? Hi Jonas, as recently pointed out on debian-devel [1], the netatalk package is accidently linked against libssl on

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Steve Langasek
On Wed, Jan 20, 2010 at 10:25:01AM +0100, Jonas Smedegaard wrote: On Wed, Jan 20, 2010 at 09:55:35AM +0100, Fabian Greffrath wrote: as recently pointed out on debian-devel [1], the netatalk package is accidently linked against libssl on some arches due to dirty buildd chroots. To avoid this

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Jonas Smedegaard
On Wed, Jan 20, 2010 at 09:55:35AM +0100, Fabian Greffrath wrote: as recently pointed out on debian-devel [1], the netatalk package is accidently linked against libssl on some arches due to dirty buildd chroots. To avoid this license violation, explicit Build-Conflicts against libssl-dev

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Jonas Smedegaard
On Wed, Jan 20, 2010 at 01:28:49AM -0800, Steve Langasek wrote: On Wed, Jan 20, 2010 at 10:25:01AM +0100, Jonas Smedegaard wrote: On Wed, Jan 20, 2010 at 09:55:35AM +0100, Fabian Greffrath wrote: as recently pointed out on debian-devel [1], the netatalk package is accidently linked against

Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Jonas Smedegaard
tags 565969 pending thanks On Wed, Jan 20, 2010 at 11:15:23AM +0100, Jonas Smedegaard wrote: On Wed, Jan 20, 2010 at 01:28:49AM -0800, Steve Langasek wrote: On Wed, Jan 20, 2010 at 10:25:01AM +0100, Jonas Smedegaard wrote: On Wed, Jan 20, 2010 at 09:55:35AM +0100, Fabian Greffrath wrote: as

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Fabian Greffrath
Ahh, problem isolated: The proper option to use is --with-openssl-dir=no - so the convenient DEB_BUILD_OPTIONS=openssl will be preserved :-) Sure?! # ./configure --with-openssl-dir=no|grep -i ssl checking for SSL... /usr (enabling RANDNUM and DHX support) SSL: CFLAGS =

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Frank Lahm
2010/1/20 Fabian Greffrath greffr...@leat.rub.de: Ahh, problem isolated: The proper option to use is --with-openssl-dir=no - so the convenient DEB_BUILD_OPTIONS=openssl will be preserved :-) Sure?! # ./configure --with-openssl-dir=no|grep -i ssl checking for SSL... /usr (enabling RANDNUM

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Jonas Smedegaard
On Wed, Jan 20, 2010 at 04:15:26PM +0100, Fabian Greffrath wrote: Ahh, problem isolated: The proper option to use is --with-openssl-dir=no - so the convenient DEB_BUILD_OPTIONS=openssl will be preserved :-) Sure?! Nope. I went offline (train ride to Copenhagen an hour from my home) where I

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Fabian Greffrath
Am 20.01.2010 16:34, schrieb Frank Lahm: # ./configure --with-openssl-dir=no|grep -i ssl checking for SSL... /usr (enabling RANDNUM and DHX support) SSL: CFLAGS = -I/usr/include/openssl ./configure --help | grep ssl --with-ssl-dir=PATH specify path to OpenSSL installation

Bug#565969: Re: Bug#565969: netatalk: Please avoid accidental linking against libssl [was: GPL-licensed software linked against libssl on buildds!]

2010-01-20 Thread Frank Lahm
2010/1/20 Fabian Greffrath greffr...@leat.rub.de: Am 20.01.2010 16:34, schrieb Frank Lahm: # ./configure --with-openssl-dir=no|grep -i ssl checking for SSL... /usr (enabling RANDNUM and DHX support)    SSL:        CFLAGS =  -I/usr/include/openssl ./configure --help | grep ssl