Bug#919043: nmu: ckermit_302-5.3 (stretch)

[Andreas Beckmann <anbe@debian.org>]

On 2019-01-12 11:45, Adam D. Barratt wrote:
>> That's the message from starting kermit in stretch:
>>
>> ?OpenSSL libraries do not match required version:
>>   . C-Kermit built with OpenSSL 1.0.2j  26 Sep 2016
>>   . Version found  OpenSSL 1.0.2q  20 Nov 2018
>>   OpenSSL versions prior to 1.0.0 must be the same.
> 
> I haven't scheduled the binNMUs yet, as I'm a little confused by that
> message - 1.0.2{k,q} are not "OpenSSL versions prior to 1.0.0".

The code carries this comment:

/*
  OpenSSL does not provide for ABI compatibility between releases prior
  to version 1.0.0.  If the version does not match, it is not safe to
  assume that any function you call takes the same parameters or does
  the same thing with them.  Removing this test prior to the OpenSSL 1.0.0
  release will result in an increase in unexplained or incorrect behaviors.
  The test should be revised once OpenSSL 1.0.0 is released and we see what
  its claims are as to ABI compatibility.
*/

So the error message seems to stem from before openssl 1.0 was released
and was never revisited afterwards.

----------

For #917485:
A proper fix to the package should drop this misleading line from the error
message and tighten the dependencies on libssl1.x.y unless the requirement can
be softened.

This is the error message from starting kermit in sid:

?OpenSSL libraries do not match required version:
  . C-Kermit built with OpenSSL 1.0.2o  27 Mar 2018
  . Version found  OpenSSL 1.0.2q  20 Nov 2018
  OpenSSL versions prior to 1.0.0 must be the same.
  Set LD_LIBRARY_PATH for OpenSSL 1.0.2o  27 Mar 2018.
  Or rebuild C-Kermit from source on this computer to make versions agree.
  C-Kermit makefile target: linux+krb5+openssl
  Or if that is what you did then try to find out why
  the program loader (image activator) is choosing a
  different OpenSSL library than the one specified in the build.

  All SSL/TLS features disabled.


Andreas