On Wed, Feb 05, 2025 at 05:57:20PM -0300, Jorge Merlino wrote: > I have created the backported package and all works fine. My problem lies > with the reverse dependencies of openvpn and how to ensure that they > continue to work with the backported package installed. These are the > dependent packages:
> and all install cleanly with the new version. Can you give any advice on how
> to verify that they will work?
Honestly, in cases like this, unless you have some reason to doubt the
new version would break rev deps, I wouldn't do much testing.
Besides, perfect-level packaging would include versioned Breaks if a
newer version of a package is not compatible with some rev-deps (this is
actually required for proper autopkgtest).
If you'd like to do a bit more of research, perhaps you could look up
the changelogs of those rev-deps, and see if there is any mention of
"fixes" to support openvpn 2.6. This should be doable given the limited
number. If there are, you need to add a versioned Breaks on openvpn,
otherwise you'd allow installation of a known broken set. We are not
going to require that you also provide a backported rev-dep if that was
to be the case.
Consider that backports are *not* installed automatically, and I'd argue
users should have some level of expectation for breaking compatibility
with non-backported rev-deps in some cases.
Now, from my knowledge, the main changes with OpenVPN 2.6 are tied to
security, where they bumped a bunch of defaults (refusing TLS 1.0/1.1,
weak hashes, weak chipers, other similar things tied more with OpenSSL 3
than openvpn itself..). changelog tells me there are few other
CLI/config changes too, but overall I'd say that it all falls within
expectations of what a user searching for a backport should have.
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
More about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
-- ubuntu-backports mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-backports
