On Thu, Aug 11, 2005 at 01:11:42AM +0200, Matthias Urlichs wrote:
> Torsten Landschoff:
> > On Wed, Aug 10, 2005 at 08:44:42AM +0200, Matthias Urlichs wrote:
> > > Sigh. This is not supposed to happen...

> > > Do you have a build log?

> > Attached.

> OK, I have looked at the sources. The problem is that the X509 data
> structures and functions have been moved to gnutls' openssl
> compatibility layer. Presumably, it makes more sense for them to be
> there, as it's not a native data structure and only used for openssl
> compatibility. Any 'normal' program would thus include+link that code
> anyway, but since when was openldap2 normal. ;-)

> => Discuss with Upstream.

> If necessary, additional hackery can probably be introduced to
> openldap2's include/ldap_pvt_gnutls.h (#include <gnutls/openssl.h>,
> #ifdef any conflicts away, link with -lgnutls-openssl) without too much
> headache.

Ok.  Couple of questions:

- What is the current license of libgnutls-openssl?  I've heard some
comments that it's now LGPL instead of GPL, but I haven't confirmed this
myself.  Anything we link with must be LGPL-only, because of the wide range
of packages that will use libldap in turn; this was a major factor in the
amount of reimplementation I did to keep libldap linked to libgnutls only.

- Why would the x509 interfaces be "compatibility-only"?  X509 is surely not
specific to OpenSSL.  Or is this simply a matter of the *particular*
interfaces that OpenLDAP is using to get at the X509 data?

- In light of this incompatibility, do you still plan to Provide:
libgnutls11-dev?

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                  to set it on, and I will move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/

Attachment: signature.asc
Description: Digital signature

Reply via email to