[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: libnet-ssh2-perl Build-Depends on libssl-dev



Hi Gregor

[Disclaimer: Only some partial information on Gregor's questions]

On Tue, Aug 14, 2012 at 09:10:57PM +0200, gregor herrmann wrote:
> libnet-ssh2-perl in Ubuntu has a Build-Dep on libssl-dev, otherwise
> the package FTBFS. In Debian we don't have this.
> 
> Nathan Handler and me have been thinking about adding the build
> dependency in Debian too, and we are a bit mystified. Nathan has also
> contacted Ilya Barygin who did the change in Ubuntu; and at the
> moment the three of us are all seeing the same without really
> understanding it.
> 
> 
> The situation is:
> 
> - In sid, without libssl-dev, we get
>   Note (probably harmless): No library found for -lssl
>   Note (probably harmless): No library found for -lcrypto
>   -lssl and -lcrypto are not passed to the linker call, and the
>   package doesn't depend in libssl afterwards.
> - If I add libssl-dev, the warnings disappear, the linker flags are
>   added, and we get a binary dependency on libssl.
> - In quantal, without libssl-dev, there's no warning, the linker
>   flags are added, and BOOM.
> - With libssl-dev: no warnings, linker flags added, build succeeds,
>   and: no dependency on libssl afterwards?!
> 
> Additional points: README and Makefile.PL say "libssh2 requires
> OpenSSL" vs. "you may also need OpenSSL"; also not very helpful.
> 
> Ansgar's guess on IRC: "Ubuntu uses --as-needed. Maybe that's the
> reason?"
> 
> 
> Anyway, it might be good to know if we need libssl-dev in Debian too,
> and it might help to understand what's going on here :)

I think we do not need libssl-dev added in Debian. This is due to
libssh2 explicitly does not want to use OpenSSL, see [1].

 [1]: http://bugs.debian.org/668271

When libssl-dev Build-Depends is added the buildlog shows the
following diff:

+dpkg-shlibdeps: warning: package could avoid a useless dependency if debian/libnet-ssh2-perl/usr/lib/perl5/auto/Net/SSH2/SSH2.so was not linked against libssl.so.1.0.0 (it uses none of the library's symbols)
+dpkg-shlibdeps: warning: package could avoid a useless dependency if debian/libnet-ssh2-perl/usr/lib/perl5/auto/Net/SSH2/SSH2.so was not linked against libcrypto.so.1.0.0 (it uses none of the library's symbols)

As libssh2 in Debian does not use OpenSSL, would it help Ubuntu if we
also remove -lssl -lcrypto in the extra_libs? (see fix-build patch).

Regards,
Salvatore

Attachment: signature.asc
Description: Digital signature


Reply to: