Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 386059

Summary: net-libs/neon uses deprecated function gnutls_certificate_verify_peers() of gnutls
Product: Gentoo Linux Reporter: Jonas de Buhr <jonas.de.buhr>
Component: [OLD] LibraryAssignee: Arfrever Frehtes Taifersar Arahesis <arfrever.fta>
Status: RESOLVED FIXED    
Severity: normal CC: gmurray, proxy-maint
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Jonas de Buhr 2011-10-07 11:41:35 UTC
net-libs/neon uses deprecated function gnutls_certificate_verify_peers() of gnutls. this leads to errors when linking against net-libs/neon compiled with USE=gnutls:

Linking CXX executable kscd 
 /usr/lib64/libneon.so.27: undefined reference to 
 `gnutls_certificate_verify_peers' 
 collect2: ld returned 1 exit status 
 make[2]: *** [kscd/kscd] Error 1 
 make[1]: *** [kscd/CMakeFiles/kscd.dir/all] Error 2 
 make: *** [all] Error 2 
 * ERROR: kde-base/kscd-4.7.2 failed (compile phase): 
 * emake failed


workaround:
compile with USE="-gnutls ssl"

patch attached.

Reproducible: Always

Steps to Reproduce:
1. USE=gnutls emerge net-libs/neon kde-base/kscd
2.
3.



diff -u -r neon-0.29.6/src/ne_socket.c neon-0.29.6_patched/src/ne_socket.c
--- neon-0.29.6/src/ne_socket.c	2010-10-09 18:07:17.000000000 +0200
+++ neon-0.29.6_patched/src/ne_socket.c	2011-10-07 12:18:22.000000000 +0200
@@ -1660,6 +1660,7 @@
 
 int ne_sock_accept_ssl(ne_socket *sock, ne_ssl_context *ctx)
 {
+    unsigned int status;
     int ret;
     ne_ssl_socket ssl;
 
@@ -1697,7 +1698,7 @@
     if (ret < 0) {
         return error_gnutls(sock, ret);
     }
-    if (ctx->verify && gnutls_certificate_verify_peers(ssl)) {
+    if (ctx->verify && gnutls_certificate_verify_peers2(ssl, &status)) {
         set_error(sock, _("Client certificate verification failed"));
         return NE_SOCK_ERROR;
     }
Comment 1 Arfrever Frehtes Taifersar Arahesis 2011-10-08 08:33:02 UTC
Please report the problem to upstream.
neon@lists.manyfish.co.uk
Comment 2 Jonas de Buhr 2011-10-11 10:19:50 UTC
net-libs/gnutls was version 3.0.3
Comment 3 Richard Grenville 2012-01-17 04:38:41 UTC
Hmm, couldn't the patch be added to the ebuild firstly before upstream accepts it? The bug not only affects kde-base/kscd now. It broke my subversion, too, after upgrading to gnutls-3.0.11.

/usr/bin/svn: symbol lookup error: /usr/lib64/libneon.so.27: undefined symbol: gnutls_certificate_verify_peer
Comment 4 Flo Gravo 2012-02-08 11:58:44 UTC
And it breaks gnome-extra/sushi

Reported upstream. But please patch it till fix comes downstream...
Comment 5 Flo Gravo 2012-02-08 12:03:58 UTC
and it breaks media-libs/musicbrainz
Comment 6 Markos Chandras (RETIRED) gentoo-dev 2012-04-01 12:04:01 UTC
What is pending here?
Comment 7 Arfrever Frehtes Taifersar Arahesis 2013-08-03 01:08:57 UTC
Fixed by upstream in neon 0.30.0.