On Sat, May 06, 2006 at 06:41:42PM +0200, Andreas Metzler wrote:
> block 363294 with 356694
> thanks
> On 2006-04-18 Bastian Blank <[EMAIL PROTECTED]> wrote:
> > Package: gnutls13
> > Version: 1.3.5
> > Severity: grave

> > A rebuild of gnutls13 looses its dependency against libtasn1 and uses a
> > staticaly linked version instead.

> -------------
> checking for libtasn1-config... /usr/bin/libtasn1-config
> checking for libtasn1 - version >= 0.3.1... no
> *** An old version of LIBTASN1 (0.2.17) was found.
> *** You need a version of LIBTASN1 newer than 0.3.1.
> -------------

> This is not fixable until libtasn >= 0.3.1 is uploaded, which will
> need to go through the NEW queue as the soname has changed.

Not necessarily.  gnutls13 does build in the absence of libtasn-dev, it just
builds *differently* depending on whether libtasn1-3 is available: it uses
its bundled tasn instead.  As long as there is no libtasn1-3 in the archive,
this should be ok (not great, but ok) -- so a reasonable solution might be
to drop the build-dependency on libtasn1-2-dev and instead build-conflict
with any libtasn dev packages that it could accidentally build against. 
Then when there's a -dev package for libtasn1-3, it should be re-added as a
build-dependency.

Since gnutls11 and gnutls12 can *not* build against libtasn1-3, and we still
need those other versions in the archive for a while yet, it seems that the
new -dev package will need to be named libtasn1-3-dev to not overwrite the
libtasn1-2-dev package.  This would give us build-conflicts with
libtasn1-3-dev now, and probably also a build-conflicts with libtasn1-2-dev
to avoid the problem with the libtasn1-2-dev 0.3 that was in the archive
briefly.  Then this would change to build-depends libtasn1-3-dev when the
time comes.

Given that there are already 53 source packages in the archive using
gnutls13 and no word on re-introducing libtasn1-3 in a way that avoids
breaking libtasn1-2, I would strongly encourage uploading this fix rather
than waiting for tasn1-3.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
[EMAIL PROTECTED]                                   http://www.debian.org/

Attachment: signature.asc
Description: Digital signature

Reply via email to