Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 420669 - net-libs/gnutls-2.12.20 bundles libcfg+
Summary: net-libs/gnutls-2.12.20 bundles libcfg+
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal enhancement
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: bundled-libs
  Show dependency tree
 
Reported: 2012-06-11 11:35 UTC by Michał Górny
Modified: 2012-06-27 07:15 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2012-06-11 11:35:55 UTC
[...]
checking for cfg_get_context in -lcfg+... no
configure: WARNING:
***
*** Libcfg+ was not found. Will use the included one.

I don't see it in gx86 so you'd probably have to package it :P.

http://opensource.platon.sk/projects/main_page.php?project_id=3
Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev 2012-06-11 13:26:26 UTC
Working on it. The problem is that the gnutls bundled code is actually fixed against a few memory leaks...
Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev 2012-06-11 14:22:51 UTC
Okay my answer to this is "let's keep it this way, and let's keep the bug open".

From one side, this project is old and unmaintained, to the point that gnutls's own code is better maintained. From the other, there is nothing else using it.

Trying to get libcfg+ to build correctly is also not worth it because upstream didn't know what PIC meant.

More importantly, gnutls 3 is not using this crap anymore.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2012-06-11 14:25:53 UTC
(In reply to comment #2)
> Okay my answer to this is "let's keep it this way, and let's keep the bug
> open".

Said Diego closing the bug... :D
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2012-06-11 14:32:30 UTC
Ehm.. yes sorry I changed my mind about keeping it open and then forgot to change the text =_=

Blocking bundled-libs we still have some tracking on whether this one is fixed or not... I guess we should start keeping a list similar to debian's about which package bundles which.
Comment 5 Tim Harder gentoo-dev 2012-06-11 16:17:56 UTC
I'm glad you came to the same conclusion as me and yes we should unmask and start using gnutls3 asap. As far as I know, there aren't many packages that still break with it.
Comment 6 Diego Elio Pettenò (RETIRED) gentoo-dev 2012-06-11 17:21:51 UTC
I'll give a run to gnutls3 on the new tinderbox tonight, let's see how it goes.

What concerns me about gnutls3 is that it still uses a bundled lib (libopts), even though the ebuild seems to set it to use a system library (it's not in the deps).

I also have one more thing I have to fix and send upstream as well, as certtool and pk11tool use libreadline which is not in the deps (but otoh I don't want to add it to the deps as I have systems where I don't keep readline around). I've signed the copyright assignment for FSF to fix this so I'll work on that anyway.
Comment 7 Tim Harder gentoo-dev 2012-06-11 20:49:56 UTC
(In reply to comment #6)
> I'll give a run to gnutls3 on the new tinderbox tonight, let's see how it
> goes.

Sounds good.

> What concerns me about gnutls3 is that it still uses a bundled lib
> (libopts), even though the ebuild seems to set it to use a system library
> (it's not in the deps).

It's in the deps via sys-devel/autogen as I mentioned on IRC.