Hi,
Am Donnerstag, den 03.07.2014, 10:42 +0300 schrieb Apollon Oikonomopoulos:
> > But in any case I don’t see this being fixed on the GHC side until 7.10
> > (at the earliest, if people help with Erik’s effort and this makes it
> > into the compiler). Maybe we should consider your first option (linking
> > tls against OpenSSL), after a license analysis of the packages we
> > include in Debian. Would you see if that compiles and works for you? And
> > what about libcurl4-nss-dev?
>
> Linking haskell-curl against the OpenSSL variant of cURL works and SSL
> is stable again. Unfortunately, the NSS variant does not work, it fails
> to load the CA certificate from a cert + key PEM file, and I can assume
> this will not be the only issue. Note that in main only 6 packages are
> linked against the NSS variant of libcurl, as opposed to 63 using
> OpenSSL and 293 using GnuTLS.
>
> I would really like to see two variants for libghc-curl-dev (OpenSSL +
> GnuTLS), but libcurl's packaging makes this difficult; we would either
> have to use two identical source packages with different B-Ds, or
> "manually" alter the linker path and provide the libcurl.so symlinks
> during build (which is an ugly hack of course).
what’s the point in having a GnuTLS variant if it does not work
properly?
According to
$ cat /var/lib/apt/lists/http.debian.net_debian_dists_sid_main_source_Sources |grep-dctrl -F Build-Depends libghc-curl-dev -s Package
only
Package: ganeti
Package: haskell-download-curl
Package: haskell-hxt-curl
Package: haskell-scrobble
Package: hoauth
are affected. Of these, all but ganeti are BSD licensed, so there should
be no problem using gnutls-openssl here.
This leaves ganeti. Which I guess is too important to just leave behind
when switching to gnutls-openssl. (CC’ing the ganeti maintainers, just
to make sure they are aware of this problem.)
Sorry, but I feel stuck here.
Greetings,
Joachim
Greetings,
Joachim
--
Joachim "nomeata" Breitner
Debian Developer
nomeata@debian.org | ICQ# 74513189 | GPG-Keyid: F0FBF51F
JID: nomeata@joachim-breitner.de | http://people.debian.org/~nomeata
Attachment:
signature.asc
Description: This is a digitally signed message part