Your message dated Mon, 24 Feb 2020 22:09:01 +0000
with message-id <e1j6lup-000659...@fasolo.debian.org>
and subject line Bug#951854: fixed in muchsync 5-2
has caused the Debian Bug report #951854,
regarding OpenSSL linking without license exception
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
951854: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=951854
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: muchsync
Severity: serious
This package links to OpenSSL even though it does not have any license
exception for it. ftp-master considers this a serious issue. Please
replace libssl with a GPL compatible library. I successfully compiled
with libwolfssl which has an OpenSSL API compatibility layer. A patch is
included.
>From b7c366c5b06982fe94242780da844d5f9adaa497 Mon Sep 17 00:00:00 2001
From: Bastian Germann <bastiangerm...@fishpost.de>
Date: Sat, 22 Feb 2020 12:21:16 +0100
Subject: [PATCH] Replace OpenSSL with wolfSSL
diff --git a/debian/control b/debian/control
index 05d60c4..b8b1523 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: muchsync
Section: mail
Priority: optional
Maintainer: Rémi Vanicat <vani...@debian.org>
-Build-Depends: debhelper (>=9), dh-autoreconf, pkg-config, libnotmuch-dev, libsqlite3-dev, libxapian-dev, libssl-dev
+Build-Depends: debhelper (>=9), dh-autoreconf, pkg-config, libnotmuch-dev, libsqlite3-dev, libxapian-dev, libwolfssl-dev
Standards-Version: 4.1.3
Homepage: http://www.muchsync.org/
diff --git a/debian/patches/link-with-wolfssl-instead-of-libcrypto.patch b/debian/patches/link-with-wolfssl-instead-of-libcrypto.patch
new file mode 100644
index 0000000..da77d07
--- /dev/null
+++ b/debian/patches/link-with-wolfssl-instead-of-libcrypto.patch
@@ -0,0 +1,23 @@
+Subject: [PATCH] Link with wolfssl instead of libcrypto
+From: Bastian Germann <bastiangerm...@fishpost.de>
+Last-Update: 2020-02-22
+
+muchsync is GPL-2+ licensed and incompatible with linking against OpenSSL.
+Link with the drop-in replacement wolfSSL instead.
+---
+ configure.ac | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff -u a/configure.ac b/configure.ac
+index 9533bff..5878ab1 100644
+--- a/configure.ac
++++ b/configure.ac
+@@ -22,7 +22,7 @@ AC_CHECK_FUNCS(openat)
+ AC_CHECK_FUNCS(fdopendir)
+
+ PKG_CHECK_MODULES([sqlite3], [sqlite3])
+-PKG_CHECK_MODULES([libcrypto], [libcrypto])
++PKG_CHECK_MODULES([libcrypto], [wolfssl])
+
+ AC_PATH_PROG(XAPIAN_CONFIG, xapian-config)
+ test -n "$XAPIAN_CONFIG" || AC_MSG_ERROR(Cannot find xapian-config)
diff --git a/debian/patches/series b/debian/patches/series
index 4a97dfa..8b85707 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1 @@
-# You must remove unused comment lines for the released package.
+link-with-wolfssl-instead-of-libcrypto.patch
diff --git a/debian/rules b/debian/rules
index 16d6d38..6a05fac 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,5 @@
#!/usr/bin/make -f
-# You must remove unused comment lines for the released package.
+export DEB_CPPFLAGS_MAINT_APPEND=-I/usr/include/wolfssl
%:
dh $@ --with autoreconf
--- End Message ---
--- Begin Message ---
Source: muchsync
Source-Version: 5-2
Done: =?utf-8?q?R=C3=A9mi_Vanicat?= <vani...@debian.org>
We believe that the bug you reported is fixed in the latest version of
muchsync, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 951...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Rémi Vanicat <vani...@debian.org> (supplier of updated muchsync package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 24 Feb 2020 20:21:51 +0100
Source: muchsync
Architecture: source
Version: 5-2
Distribution: unstable
Urgency: medium
Maintainer: Rémi Vanicat <vani...@debian.org>
Changed-By: Rémi Vanicat <vani...@debian.org>
Closes: 951854
Changes:
muchsync (5-2) unstable; urgency=medium
.
* Links with wolfssl instead of libcrypto, fix:
"OpenSSL linking without license exception", thanks to Bastian Germann
(Closes: #951854).
* Update standards version to 4.5.0 (no changes)
* add Vcs-* for salsa
Checksums-Sha1:
193236fa5e6374649eb7630fb38ca33cbc319293 2006 muchsync_5-2.dsc
17b07a125db67477c6807715eb816ed6a0755351 3344 muchsync_5-2.debian.tar.xz
Checksums-Sha256:
0e0d54563ac16c1a8c0a743b6a490cdb3fc4656e1fbdefbd494921b41723f336 2006
muchsync_5-2.dsc
9f80d5038df9ab4a2e1612d545eca784e755630ed2d6db0261e6112b82809134 3344
muchsync_5-2.debian.tar.xz
Files:
dd8d056270167d565db3298abad3f986 2006 mail optional muchsync_5-2.dsc
b5a4178346c1e5e2c7491c5cccb98ad6 3344 mail optional muchsync_5-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=fqw1
-----END PGP SIGNATURE-----
--- End Message ---
