[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#952657: marked as done (Document OpenSSL linking exception)

Your message dated Thu, 27 Feb 2020 06:48:35 +0100
with message-id <2835628.lRgxnz3Oe0@thyrus>
and subject line Re: Bug#952657: Document OpenSSL linking exception
has caused the Debian Bug report #952657,
regarding Document OpenSSL linking exception
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
952657: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952657
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libqt5network5
Severity: normal

This package links to libssl. An OpenSSL linking exception is included
in src/network/doc/src/qtnetwork.qdoc and files in src/network/ssl but
it is not documented in debian/copyright. Please include it there.

Please also have a look at #924937. libqt5network5 has many GPL licensed
reverse dependencies, similar to libpq5, some of which do not have this
exception. Please consider configuring with -openssl-runtime because
that would make this issue less important for these reverse dependencies
Then one could install them without libssl, which would not make them a
derivative work of OpenSSL.

--- End Message ---
--- Begin Message --- 
In data mercoledì 26 febbraio 2020 23:40:52 CET, Bastian Germann ha scritto:
> Package: libqt5network5
> Severity: normal
> 
> This package links to libssl.

No, it does not.

$ dpkg -L libqt5network5 | grep -v usr/share
/.
/usr
/usr/lib
/usr/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu/libQt5Network.so.5.12.5
/usr/lib/x86_64-linux-gnu/qt5
/usr/lib/x86_64-linux-gnu/qt5/plugins
/usr/lib/x86_64-linux-gnu/qt5/plugins/bearer
/usr/lib/x86_64-linux-gnu/qt5/plugins/bearer/libqconnmanbearer.so
/usr/lib/x86_64-linux-gnu/qt5/plugins/bearer/libqgenericbearer.so
/usr/lib/x86_64-linux-gnu/qt5/plugins/bearer/libqnmbearer.so
/usr/lib/x86_64-linux-gnu/libQt5Network.so.5
/usr/lib/x86_64-linux-gnu/libQt5Network.so.5.12

$ LANG=C readelf -d /usr/lib/x86_64-linux-gnu/libQt5Network.so.5 /usr/lib/x86_64-linux-gnu/qt5/plugins/bearer/* | grep NEEDED | sort -u
 0x0000000000000001 (NEEDED)             Shared library: [libc.so.6]
 0x0000000000000001 (NEEDED)             Shared library: [libdl.so.2]
 0x0000000000000001 (NEEDED)             Shared library: [libpthread.so.0]
 0x0000000000000001 (NEEDED)             Shared library: [libQt5Core.so.5]
 0x0000000000000001 (NEEDED)             Shared library: [libQt5DBus.so.5]
 0x0000000000000001 (NEEDED)             Shared library: [libQt5Network.so.5]
 0x0000000000000001 (NEEDED)             Shared library: [libstdc++.so.6]
 0x0000000000000001 (NEEDED)             Shared library: [libz.so.1]

QtNetwork can be built to link against OpenSSL, and we built it to
dlopen it instead, exactly for the reasons mentioned. The dependency
of the libqt5network5 package is added with a trivial test program at
build time, so installing libqt5network5 pulls the OpenSSL library
it was built against (easier to track & rebuild on OpenSSL SONAME
bumps).

-- 
Pino Toscano

Attachment: signature.asc
Description: This is a digitally signed message part.


--- End Message ---
Reply to: