Bug 386059 – net-libs/neon uses deprecated function gnutls_certificate_verify_peers() of gnutls

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Jonas de Buhr 2011-10-07 11:41:35 UTC]

net-libs/neon uses deprecated function gnutls_certificate_verify_peers() of gnutls. this leads to errors when linking against net-libs/neon compiled with USE=gnutls:

Linking CXX executable kscd 
 /usr/lib64/libneon.so.27: undefined reference to 
 `gnutls_certificate_verify_peers' 
 collect2: ld returned 1 exit status 
 make[2]: *** [kscd/kscd] Error 1 
 make[1]: *** [kscd/CMakeFiles/kscd.dir/all] Error 2 
 make: *** [all] Error 2 
 * ERROR: kde-base/kscd-4.7.2 failed (compile phase): 
 * emake failed


workaround:
compile with USE="-gnutls ssl"

patch attached.

Reproducible: Always

Steps to Reproduce:
1. USE=gnutls emerge net-libs/neon kde-base/kscd
2.
3.



diff -u -r neon-0.29.6/src/ne_socket.c neon-0.29.6_patched/src/ne_socket.c
--- neon-0.29.6/src/ne_socket.c	2010-10-09 18:07:17.000000000 +0200
+++ neon-0.29.6_patched/src/ne_socket.c	2011-10-07 12:18:22.000000000 +0200
@@ -1660,6 +1660,7 @@
 
 int ne_sock_accept_ssl(ne_socket *sock, ne_ssl_context *ctx)
 {
+    unsigned int status;
     int ret;
     ne_ssl_socket ssl;
 
@@ -1697,7 +1698,7 @@
     if (ret < 0) {
         return error_gnutls(sock, ret);
     }
-    if (ctx->verify && gnutls_certificate_verify_peers(ssl)) {
+    if (ctx->verify && gnutls_certificate_verify_peers2(ssl, &status)) {
         set_error(sock, _("Client certificate verification failed"));
         return NE_SOCK_ERROR;
     }

[Comment 1 Arfrever Frehtes Taifersar Arahesis 2011-10-08 08:33:02 UTC]

Please report the problem to upstream.
[e-mail]

[Comment 2 Jonas de Buhr 2011-10-11 10:19:50 UTC]

net-libs/gnutls was version 3.0.3

[Comment 3 Richard Grenville 2012-01-17 04:38:41 UTC]

Hmm, couldn't the patch be added to the ebuild firstly before upstream accepts it? The bug not only affects kde-base/kscd now. It broke my subversion, too, after upgrading to gnutls-3.0.11.

/usr/bin/svn: symbol lookup error: /usr/lib64/libneon.so.27: undefined symbol: gnutls_certificate_verify_peer

[Comment 4 Flo Gravo 2012-02-08 11:58:44 UTC]

And it breaks gnome-extra/sushi

Reported upstream. But please patch it till fix comes downstream...

[Comment 5 Flo Gravo 2012-02-08 12:03:58 UTC]

and it breaks media-libs/musicbrainz

[Comment 6 Markos Chandras (RETIRED) 2012-04-01 12:04:01 UTC]

What is pending here?

[Comment 7 Arfrever Frehtes Taifersar Arahesis 2013-08-03 01:08:57 UTC]

Fixed by upstream in neon 0.30.0.