Bug#941150: transition: nettle

[Magnus Holmgren <holmgren@debian.org>]

Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: transition

Apologies for getting carried away and uploading straight to sid earlier. I'm not used to having so many reverse dependencies...

Here's the NEWS for the Nettle 3.5 release from upstream:

        This release adds a couple of new features and optimizations,
        and deletes or deprecates a few obsolete features. It is *not*
        binary (ABI) compatible with earlier versions. Except for
        deprecations listed below, it is intended to be fully
        source-level (API) compatible with Nettle-3.4.1.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0, with sonames libnettle.so.7 and
        libhogweed.so.5.

	[...]

        Deleted features:

        * The header file des-compat.h and everything declared therein
          has been deleted, as announced earlier. This file provided a
          subset of the old libdes/ssleay/openssl interface for DES
          and triple-DES. DES is still supported, via the functions
          declared in des.h.

        * Functions using the old struct aes_ctx have been marked as
          deprecated. Use the fixed key size interface instead, e.g.,
          struct aes256_ctx, introduced in Nettle-3.0.

        * The header file nettle-stdint.h, and corresponding autoconf
          tests, have been deleted. Nettle now requires that the
          compiler/libc provides <stdint.h>.

        Miscellaneous:

        * Support for big-endian ARM systems, contributed by Michael
          Weiser.

        * The programs aesdata, desdata, twofishdata, shadata and
          gcmdata are no longer built by default. Makefile
          improvements contributed by Jay Foad.

        * The "example" program examples/eratosthenes.c has been
          deleted.

        * The contents of hash context structs, and the deprecated
          aes_ctx struct, have been reorganized, to enable later
          optimizations.

        The shared library names are libnettle.so.7.0 and
        libhogweed.so.5.0.


I've tried building all reverse dependencies with the new version and found the following packages needing changes:

dnsmasq (bug filed, simple fix)
unbound (bug filed, simple fix)
rdup (bug filed, a bit more involved fix)
A few other packages FTBFS for other reasons: ocamlnet, libstorj (bug filed), lsh-utils (mine, fails tests)

Ben file:

title = "nettle";
is_affected = .depends ~ /libnettle6|libhogweed4/ | .depends ~ /libnettle7|libhogweed5/;
is_good = .depends ~ /libnettle7|libhogweed5/;
is_bad = .depends ~ /libnettle6|libhogweed4/;