Package: libopensc2
Version: 0.11.13-1
Severity: serious
Justification: Policy 8.2


The libopensc2 package currently contains several unversioned files, including
onepin-opensc-pkcs11.so, opensc-pkcs11.so, pkcs11-spy.so in /usr/lib, and
..profile files in /usr/share/opensc/ directory. The package should ideally
contain only versioned libraries (libopensc.so.2, libpkcs15init.so.2, and
libscconf.so.2).

The unversioned files in libopensc2 package will eventually conflict with
libopensc3 package when upstream releases a new version of opensc. According to
upstream's release schedule this should happen very soon: There is already a
-rc1 out which bumped soname.

It would be very good if you could split out the unversioned files into a
separate package to make sure we'll have a smooth upgrade path to libopensc3 in
the next Debian release.

I would suggest a split with the following scheme:
opensc-tools:
  /usr/bin/*
libopensc:
  /usr/lib/*.2*
opensc-pkcs11:
  /usr/lib/*pkcs11*.so,

Currently packages which dlopen() any of the pkcs11 modules are depending on
versioned libopensc2 package. This is wrong; it will be hard to maintain proper
upgrade paths. It would be cleaner if these packages could instead depend on
the unversioned opensc-pkcs11 package.

Quoting from Debian Policy Manual, section 8.2:
"If your package contains files whose names do not change with each change in
the library shared object version, you must not put them in the shared library
package. Otherwise, several versions of the shared library cannot be installed
at the same time without filename clashes, making upgrades and transitions
unnecessarily difficult."

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libopensc2 depends on:
ii  libc6                  2.11.2-6+squeeze1 Embedded GNU C Library: Shared lib
ii  libltdl7               2.2.6b-2          A system independent dlopen wrappe
ii  libopenct1             0.6.20-1.1        middleware framework for smart car
ii  libssl0.9.8            0.9.8o-2          SSL shared libraries
ii  zlib1g                 1:1.2.3.4.dfsg-3  compression library - runtime

libopensc2 recommends no packages.

libopensc2 suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to