Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Jérémy Lal]

2018-02-06 2:53 GMT+01:00 :

> It looks like this is fixed with nodejs version 8.9.3~dfsg-1.
>
>   * Backport #16130: support both openssl 1.0.1 and 1.1.0
> Add openssl/fixups.patch to take care of additional fixes.
>   * Build against latest ssl-dev version
>
> Only took a year...
>

Debian switched very early to openssl 1.1.0, which put us maintainers
in the position to wait for upstream to implement support for that version.
Not happy with it ? Use another distro.

Jérémy

Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[anomie]

It looks like this is fixed with nodejs version 8.9.3~dfsg-1.

  * Backport #16130: support both openssl 1.0.1 and 1.1.0
Add openssl/fixups.patch to take care of additional fixes.
  * Build against latest ssl-dev version

Only took a year...

Bug#850660: [Pkg-javascript-devel] Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Jonas Smedegaard]

Quoting Sebastiaan Couwenberg (2017-01-29 14:56:41)
> On 01/29/2017 02:31 PM, Jonas Smedegaard wrote:
>> Quoting ano...@users.sourceforge.net (2017-01-29 14:12:59)
>>> I've been unable to upgrade nodejs and nodejs-dev thanks to this 
>>> issue: I need npm for some things, but also php7.0-dev (which 
>>> depends on libssl-dev) for something else.
>> 
>> Please share what it is that - transitively or not but _concurrently_ 
>> - needs both libssl-dev.
>
> A system with (build) dependencies for multiple packages installed.

Thanks for clarifying that the issue is *not* impossibility of building 
a package, but annoyance of wanting a single unified development 
environment (which is nice but not promised by Debian nor this package).

I will leave it to others to deal further with this bugreport.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature

Bug#850660: [Pkg-javascript-devel] Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Sebastiaan Couwenberg]

On 01/29/2017 02:31 PM, Jonas Smedegaard wrote:
> Quoting ano...@users.sourceforge.net (2017-01-29 14:12:59)
>> I've been unable to upgrade nodejs and nodejs-dev thanks to this issue:
>> I need npm for some things, but also php7.0-dev (which depends on
>> libssl-dev) for something else.
> 
> Please share what it is that - transitively or not but _concurrently_ -
> needs both libssl-dev.

A system with (build) dependencies for multiple packages installed.

My unstable system is also affect by this issue, it has php7.0-dev
installed as part of the php-geos build dependencies. Those packages
need to be removed to allow the upgrade of nodejs & nodejs-dev.

Because of the unholy mess that is the OpenSSL 1.1.0 transition and the
complications it brings for the upcoming freeze, Julien Cristau has
suggested to "go back to shipping libssl-dev as 1.0.2 for stretch, and
rebuild the world" [0].

I hope that this happens so that we get rid of issues like this one
caused by libssl-dev and libssl1.0-dev conflicting.

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827061#1427

Kind Regards,

Bas

-- 
 GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1



signature.asc
Description: OpenPGP digital signature

Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Jonas Smedegaard]

Quoting ano...@users.sourceforge.net (2017-01-29 14:12:59)
> I've been unable to upgrade nodejs and nodejs-dev thanks to this issue:
> I need npm for some things, but also php7.0-dev (which depends on
> libssl-dev) for something else.

Please share what it is that - transitively or not but _concurrently_ -
needs both libssl-dev.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature

Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[anomie]

I've been unable to upgrade nodejs and nodejs-dev thanks to this issue:
I need npm for some things, but also php7.0-dev (which depends on
libssl-dev) for something else.

Bug#850660: nodejs-dev: npm conflicts transitively with libssl-dev since nodejs-dev 4.7.2~dfsg-1

[Axel Beckert]

Package: nodejs-dev
Version: 4.7.2~dfsg-1
Severity: wishlist
Affects: npm npm2deb node-gyp libssl-dev

Dear NodeJS Maintainers,

since the upload of 4.7.2~dfsg-1¸ npm is no more co-installable with
libssl-dev which is rather annoying.

Full dependency chain causing this issue:

* npm depends upon node-gyp
* node-gyp depends upon nodejs-dev
* nodejs-dev depends upon libssl1.0-dev
* libssl1.0-dev conflicts with libssl-dev

It would be nice if that chain could be broken somewhere as any
non-development package pulling in a non-default development package
which conflicts with a default development package is very annoying.

Maybe a solution similar to the one for apache2-dev can found:

> apache2 (2.4.23-8) unstable; urgency=medium
>
>   * Move the mod_ssl_openssl.h header and the dependency on libssl-dev to a
> new package apache2-ssl-dev.  Packages that interface with openssl
> state from mod_ssl must build-depend on this new package.
> This will help to disentangle the build-deps in the openssl transition.
> Closes: #845033
>
>  -- Stefan Fritsch   Sun, 20 Nov 2016 00:33:13 +0100

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (600, 'testing'), (500, 'unstable-debug'), 
(500, 'buildd-unstable'), (110, 'experimental'), (1, 'experimental-debug'), (1, 
'buildd-experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages nodejs-dev depends on:
ii  libssl1.0-dev  1.0.2j-5
ii  libuv1-dev 1.9.1-3
ii  nodejs 4.7.2~dfsg-1
ii  python 2.7.13-1

nodejs-dev recommends no packages.

Versions of packages nodejs-dev suggests:
ii  debhelper  10.2.3

-- no debconf information