Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-08 Thread Atsuhito Kohda 
Hi Andreas and Thorsten,

On Fri, 4 Jul 2014 20:09:52 +0200, Andreas Metzler wrote:

 Looks like lynx-cur is missing a build-dependency on
 libgcrypt20-dev as a hotfix or better use gnutls_rnd() instead of
 gcry_randomize() and stop linking against gcrypt. (Totally untested,
 no guarantees patch attached.)

I only added libgcrypt20-dev to B-D and built the package, then
it seems lynx works fine so I uploaded the package.  
But if your patch is necessary to fix the problem properly, 
please let me know.

Best regards,   2014-7-8(Tue)

-- 
 Debian Developer - much more I18N of Debian
 Atsuhito Kohda kohda AT debian.org
 Department of Math., Univ. of Tokushima


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-08 Thread Thorsten Glaser 
Atsuhito Kohda dixit:

it seems lynx works fine so I uploaded the package.  

Yes, this seems to work better now. Thank you.

bye,
//mirabilos
-- 
(gnutls can also be used, but if you are compiling lynx for your own use,
there is no reason to consider using that package)
-- Thomas E. Dickey on the Lynx mailing list, about OpenSSL


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-08 Thread Andreas Metzler 
On 2014-07-08 Atsuhito Kohda ko...@pm.tokushima-u.ac.jp wrote:
 On Fri, 4 Jul 2014 20:09:52 +0200, Andreas Metzler wrote:

  Looks like lynx-cur is missing a build-dependency on
  libgcrypt20-dev as a hotfix or better use gnutls_rnd() instead of
  gcry_randomize() and stop linking against gcrypt. (Totally untested,
  no guarantees patch attached.)

 I only added libgcrypt20-dev to B-D and built the package, then
 it seems lynx works fine so I uploaded the package.  
 But if your patch is necessary to fix the problem properly, 
 please let me know.

Hello Atsuhito,

thanks for fixing the issue.

it is less a necessary than a I think it is ugly. ;-) Afaict (but
please take this with a grain of salt) lynx is only using a single
gcrypt function, and gnutls would provide something equivalent. So by
using the gnutls function the external dependency could be avoided.
Imho this should be fixed upstream.

cu Andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-08 Thread Thomas Dickey 
On Tue, Jul 08, 2014 at 07:22:39PM +0200, Andreas Metzler wrote:
 On 2014-07-08 Atsuhito Kohda ko...@pm.tokushima-u.ac.jp wrote:
  On Fri, 4 Jul 2014 20:09:52 +0200, Andreas Metzler wrote:
 
   Looks like lynx-cur is missing a build-dependency on
   libgcrypt20-dev as a hotfix or better use gnutls_rnd() instead of
   gcry_randomize() and stop linking against gcrypt. (Totally untested,
   no guarantees patch attached.)
 
  I only added libgcrypt20-dev to B-D and built the package, then
  it seems lynx works fine so I uploaded the package.  
  But if your patch is necessary to fix the problem properly, 
  please let me know.
 
 Hello Atsuhito,
 
 thanks for fixing the issue.
 
 it is less a necessary than a I think it is ugly. ;-) Afaict (but
 please take this with a grain of salt) lynx is only using a single
 gcrypt function, and gnutls would provide something equivalent. So by
 using the gnutls function the external dependency could be avoided.
 Imho this should be fixed upstream.

probably (at least, to ensure that the given function is present, etc).

-- 
Thomas E. Dickey dic...@invisible-island.net
http://invisible-island.net
ftp://invisible-island.net


signature.asc
Description: Digital signature

Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-04 Thread Thorsten Glaser 
Package: lynx-cur
Version: 2.8.9dev1-1
Severity: grave
Justification: renders package unusable

Just updated:

Unpacking lynx-cur (2.8.9dev1-1) over (2.8.8pre5-1) ...

After updating:

Alert!: This client does not contain support for HTTPS URLs.

lynx: Can't access startfile 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601683


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh

Versions of packages lynx-cur depends on:
ii  libbsd0   0.6.0-2
ii  libbz2-1.01.0.6-5
ii  libc6 2.19-4
ii  libidn11  1.28-2
ii  libncursesw5  5.9+20140118-1
ii  libtinfo5 5.9+20140118-1
ii  zlib1g1:1.2.8.dfsg-1

Versions of packages lynx-cur recommends:
ii  mime-support  3.56

lynx-cur suggests no packages.

-- Configuration Files:
/etc/lynx-cur/lynx.cfg changed [not included]
/etc/lynx-cur/lynx.lss changed [not included]

-- debconf information excluded


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#753699: lynx: Alert!: This client does not contain support for HTTPS URLs.

2014-07-04 Thread Andreas Metzler 
On 2014-07-04 Thorsten Glaser t...@mirbsd.de wrote:
 Package: lynx-cur
 Version: 2.8.9dev1-1
 Severity: grave
 Justification: renders package unusable

 Just updated:

 Unpacking lynx-cur (2.8.9dev1-1) over (2.8.8pre5-1) ...

 After updating:

 Alert!: This client does not contain support for HTTPS URLs.

 lynx: Can't access startfile 
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=601683
[...]

Hello,

Looks like lynx-cur is missing a build-dependency on
libgcrypt20-dev as a hotfix or better use gnutls_rnd() instead of
gcry_randomize() and stop linking against gcrypt. (Totally untested,
no guarantees patch attached.)

cu Andreas


-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'
--- lynx-cur-2.8.9dev1.orig/configure
+++ lynx-cur-2.8.9dev1/configure
@@ -15012,7 +15012,7 @@
   echo $as_me: failed program was: 5
 cat conftest.$ac_ext 5
 
-LIBS=-lgnutls -lgnutls -lgcrypt $cf_save_LIBS
+LIBS=-lgnutls $cf_save_LIBS
 
 cat conftest.$ac_ext _ACEOF
 #line 15018 configure
@@ -15350,7 +15350,7 @@
 echo ${as_me:-configure}:15350: testing ... testing $cf_cv_library_path_gnutls ... 15
 
 CPPFLAGS=$cf_test_CPPFLAGS
-LIBS=-lgnutls -lgnutls -lgcrypt $cf_save_LIBS
+LIBS=-lgnutls $cf_save_LIBS
 LDFLAGS=$cf_save_LDFLAGS -L$cf_cv_library_path_gnutls
 cat conftest.$ac_ext _ACEOF
 #line 15356 configure
@@ -15559,7 +15559,7 @@
 fi
 
 		fi
-		LIBS=-lgnutls -lgcrypt $LIBS
+		LIBS=-lgnutls $LIBS
 
 		EXTRA_OBJS=$EXTRA_OBJS tidy_tls\$o
 
@@ -16687,7 +16687,7 @@
 fi
 
 		fi
-		LIBS=-lgnutls -lgcrypt $LIBS
+		LIBS=-lgnutls $LIBS
 
 		if test $cf_pkg_gnutls = none ; then
 echo $as_me:16693: checking for SSL_connect in -lgnutls-openssl 5
only in patch2:
unchanged:
--- lynx-cur-2.8.9dev1.orig/src/tidy_tls.c
+++ lynx-cur-2.8.9dev1/src/tidy_tls.c
@@ -11,7 +11,7 @@
 #include tidy_tls.h
 
 #include gnutls/x509.h
-#include gcrypt.h
+#include gnutls/crypto.h
 #include libtasn1.h		/* ASN1_SUCCESS,etc */
 #include string.h
 
@@ -95,7 +95,7 @@
  */
 int RAND_bytes(unsigned char *buffer, int num)
 {
-gcry_randomize(buffer, num, GCRY_VERY_STRONG_RANDOM);
+gnutls_rnd(GNUTLS_RND_KEY, buffer, num);
 return 1;
 }