On Tue, Nov 29, 2016 at 11:50:21PM +0100, Sebastian Andrzej Siewior wrote:
> On 2016-11-28 16:49:35 [+0200], Adrian Bunk wrote:
> > Package: polygraph
> > Version: 4.3.2-4
> > Severity: serious
> > Tags: patch
> > Control: block 827061 by -1
> >
> > ...
> > checking for CRYPTO_lock in -lcrypto... no
> > checking for CRYPTO_add_lock in -lcrypto... no
> > ...
> >
> > Not a perfect solution but an option for stretch is the patch below to
> > use OpenSSL 1.0.2
> >
> > The "| libssl-dev (<< 1.1.0~)" is added for backports.
>
> could we please keep the bug reporting the way we had it? That means to
> note that fails to properly build against openssl 1.1 which will remain
> open with severity important if the package stays with openssl 1.0.
>
> > --- debian/control.old 2016-11-28 11:13:51.000000000 +0000
> > +++ debian/control 2016-11-28 11:13:57.000000000 +0000
> > @@ -6,7 +6,7 @@
> > debhelper (>= 9),
> > dh-autoreconf,
> > libncurses5-dev,
> > - libssl-dev,
> > + libssl1.0-dev | libssl-dev (<< 1.1.0~),
> > zlib1g-dev,
> > Standards-Version: 3.9.8
> > Homepage: http://www.web-polygraph.org
>
> I though we agreed not to tag this as a patch
Where did I agree to that?
> but as a hint what can be
> done if the maintainer chooses to stay with 1.0.
Reality in Debian is that a large amount of packages is not well
maintained, polygraph is actually orphaned.
> Do you expect this bug
> to be closed once it switches to libsl1.0-dev?
The thing I do care about is not the patch tag, the thing I do care
about is that we are not losing any packages in stretch due to the
whole OpenSSL situation.
A patch tag makes it visible that there is a solution for the RC issue
in stretch.
Who is going to do the uploads for the ~ 100 not well maintained
packages that need to be switched to 1.0.2?
Will you do these?
It should be your job for making dual 1.0.2/1.1 work.
Or will you at least sponsor me, if I send you a batch of 100 NMUs and
QA uploads switching packages to 1.0.2?
> Sebastian
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
