Bug 420669

Summary:	net-libs/gnutls-2.12.20 bundles libcfg+
Product:	Gentoo Linux	Reporter:	Michał Górny <mgorny>
Component:	[OLD] Library	Assignee:	Crypto team [DISABLED] <crypto+disabled>
Status:	RESOLVED WONTFIX
Severity:	enhancement	CC:	esigra
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	251464

Description Michał Górny archtester

2012-06-11 11:35:55 UTC

[...]
checking for cfg_get_context in -lcfg+... no
configure: WARNING:
***
*** Libcfg+ was not found. Will use the included one.

I don't see it in gx86 so you'd probably have to package it :P.

http://opensource.platon.sk/projects/main_page.php?project_id=3

Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-06-11 13:26:26 UTC

Working on it. The problem is that the gnutls bundled code is actually fixed against a few memory leaks...

Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-06-11 14:22:51 UTC

Okay my answer to this is "let's keep it this way, and let's keep the bug open".

From one side, this project is old and unmaintained, to the point that gnutls's own code is better maintained. From the other, there is nothing else using it.

Trying to get libcfg+ to build correctly is also not worth it because upstream didn't know what PIC meant.

More importantly, gnutls 3 is not using this crap anymore.

Comment 3 Michał Górny archtester

2012-06-11 14:25:53 UTC

(In reply to comment #2)
> Okay my answer to this is "let's keep it this way, and let's keep the bug
> open".

Said Diego closing the bug... :D

Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-06-11 14:32:30 UTC

Ehm.. yes sorry I changed my mind about keeping it open and then forgot to change the text =_=

Blocking bundled-libs we still have some tracking on whether this one is fixed or not... I guess we should start keeping a list similar to debian's about which package bundles which.

Comment 5 Tim Harder gentoo-dev

2012-06-11 16:17:56 UTC

I'm glad you came to the same conclusion as me and yes we should unmask and start using gnutls3 asap. As far as I know, there aren't many packages that still break with it.

Comment 6 Diego Elio Pettenò (RETIRED) gentoo-dev

2012-06-11 17:21:51 UTC

I'll give a run to gnutls3 on the new tinderbox tonight, let's see how it goes.

What concerns me about gnutls3 is that it still uses a bundled lib (libopts), even though the ebuild seems to set it to use a system library (it's not in the deps).

I also have one more thing I have to fix and send upstream as well, as certtool and pk11tool use libreadline which is not in the deps (but otoh I don't want to add it to the deps as I have systems where I don't keep readline around). I've signed the copyright assignment for FSF to fix this so I'll work on that anyway.

Comment 7 Tim Harder gentoo-dev

2012-06-11 20:49:56 UTC

(In reply to comment #6)
> I'll give a run to gnutls3 on the new tinderbox tonight, let's see how it
> goes.

Sounds good.

> What concerns me about gnutls3 is that it still uses a bundled lib
> (libopts), even though the ebuild seems to set it to use a system library
> (it's not in the deps).

It's in the deps via sys-devel/autogen as I mentioned on IRC.