Debian Bug report logs - #846569
libsnmp-dev: Should depend on "libssl-dev | libssl1.0-dev" if possible

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Raphaël Hertzog <hertzog@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libsnmp-dev: Should depend on "libssl-dev | libssl1.0-dev" if possible

Date: Fri, 02 Dec 2016 10:43:17 +0100

Package: libsnmp-dev
Version: 5.7.3+dfsg-1.5+b1
Severity: serious
Justification: FTBFS in openvas

Currently openvas is not buildable because it build-depends on libssh-dev
which depends on libssl1.0-dev and libsnmp-dev which depends on
libssl-dev (and both libssl*-dev are not co-installable).

I believe we might be able to fix this by making libsnmp-dev depend on either
version of the -dev package. But this is true only if libsnmp does not reuse
parts of the SSL API in its own API... and I don't know if this is the case.

If that's not the case, then we should stick to libssl1.0-dev until
ssh works with OpenSSL 1.1 and everything can be switch together to version 1.1.


report:
 -
  package: sbuild-build-depends-openvas-libraries-dummy
  version: 0.invalid.0
  architecture: amd64
  status: broken
  reasons:
   -
    conflict:
     pkg1:
      package: libssl1.0-dev
      version: 1.0.2j-4
      architecture: amd64
      unsat-conflict: libssl-dev:amd64
     pkg2:
      package: libssl-dev
      version: 1.1.0c-2
      architecture: amd64
     depchain1:
      -
       depchain:
        -
         package: sbuild-build-depends-openvas-libraries-dummy
         version: 0.invalid.0
         architecture: amd64
         depends: libssh-dev:amd64 (>= 0.5.0)
        -
         package: libssh-dev
         version: 0.7.3-2
         architecture: amd64
         depends: libssl1.0-dev:amd64
     depchain2:
      -
       depchain:
        -
         package: sbuild-build-depends-openvas-libraries-dummy
         version: 0.invalid.0
         architecture: amd64
         depends: libsnmp-dev:amd64
        -
         package: libsnmp-dev
         version: 5.7.3+dfsg-1.5+b1
         architecture: amd64
         depends: libssl-dev:amd64


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Message #12 received at 846569@bugs.debian.org (full text, mbox, reply):

From: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>

To: Raphaël Hertzog <hertzog@debian.org>

Cc: 846569@bugs.debian.org

Subject: Re: libsnmp-dev: Should depend on "libssl-dev | libssl1.0-dev" if possible

Date: Sat, 17 Dec 2016 21:42:40 +0100

On 2016-12-02 10:43:17 [+0100], Raphaël Hertzog wrote:
> Currently openvas is not buildable because it build-depends on libssh-dev
> which depends on libssl1.0-dev and libsnmp-dev which depends on
> libssl-dev (and both libssl*-dev are not co-installable).
> 
> I believe we might be able to fix this by making libsnmp-dev depend on either
> version of the -dev package. But this is true only if libsnmp does not reuse
> parts of the SSL API in its own API... and I don't know if this is the case.
> 
> If that's not the case, then we should stick to libssl1.0-dev until
> ssh works with OpenSSL 1.1 and everything can be switch together to version 1.1.

I've been just looking at this due to libsnmp-perl deps on libssl. The
perl .so files link against libcrypto.so but they don't share any
symbols so I don't think this linking is required (or openssl used by
perl at all).
The 1.1.0 support should not be that complicated but if you have
packages that depend on it and already moved on to libssl1.0-dev I would
say to keep this package with libssl1.0-dev for Stretch.

Sebastian

Message #19 received at 846569-close@bugs.debian.org (full text, mbox, reply):

From: Niels Thykier <niels@thykier.net>

To: 846569-close@bugs.debian.org

Subject: Bug#846569: fixed in net-snmp 5.7.3+dfsg-1.6

Date: Mon, 16 Jan 2017 09:04:43 +0000

Source: net-snmp
Source-Version: 5.7.3+dfsg-1.6

We believe that the bug you reported is fixed in the latest version of
net-snmp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 846569@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Niels Thykier <niels@thykier.net> (supplier of updated net-snmp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 14 Jan 2017 08:40:05 +0000
Source: net-snmp
Binary: snmpd snmptrapd snmp libsnmp-base libsnmp30 libsnmp30-dbg libsnmp-dev libsnmp-perl python-netsnmp tkmib
Architecture: source
Version: 5.7.3+dfsg-1.6
Distribution: unstable
Urgency: medium
Maintainer: Net-SNMP Packaging Team <pkg-net-snmp-devel@lists.alioth.debian.org>
Changed-By: Niels Thykier <niels@thykier.net>
Description:
 libsnmp-base - SNMP configuration script, MIBs and documentation
 libsnmp-dev - SNMP (Simple Network Management Protocol) development files
 libsnmp-perl - SNMP (Simple Network Management Protocol) Perl5 support
 libsnmp30  - SNMP (Simple Network Management Protocol) library
 libsnmp30-dbg - SNMP (Simple Network Management Protocol) library debug
 python-netsnmp - SNMP (Simple Network Management Protocol) Python support
 snmp       - SNMP (Simple Network Management Protocol) applications
 snmpd      - SNMP (Simple Network Management Protocol) agents
 snmptrapd  - Net-SNMP notification receiver
 tkmib      - SNMP (Simple Network Management Protocol) MIB browser
Closes: 836312 846569
Changes:
 net-snmp (5.7.3+dfsg-1.6) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Update Build-Depends to use libssl1.0-dev and
     default-libmysqlclient-dev.  (Closes: #846569, #836312)
   * Use "perl" instead of the (now removed) "perl-modules" package
     in Recommends.
   * Add dh-python build-depends because dh_python2 asked for it.
   * Drop debian/libsnmp30.postinst - its entire contents was handled
     by debhelper.
Checksums-Sha1:
 66e194f40831cd1d0a06d2fbb0fa7ee8bbfc654b 3133 net-snmp_5.7.3+dfsg-1.6.dsc
 eb3a81ffa7bd4aa8f6137d225f68fa8b72820034 73164 net-snmp_5.7.3+dfsg-1.6.debian.tar.xz
Checksums-Sha256:
 46caa991f7fcbc71906c34d6d52999585ea082d6722db23818782e66c8f5f30a 3133 net-snmp_5.7.3+dfsg-1.6.dsc
 0dbc6e88fc71787aa8c7fdebf6f7cda924bc14cf89a1bfdec1adcca1fd6f76be 73164 net-snmp_5.7.3+dfsg-1.6.debian.tar.xz
Files:
 bf7d070b65d7e22139b4f1d0acadc067 3133 net optional net-snmp_5.7.3+dfsg-1.6.dsc
 1b179fc241f4996ab96756514ebc9269 73164 net optional net-snmp_5.7.3+dfsg-1.6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=+zIL
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.