[Pkg-giraffe-discuss] Bug#812969: libvmime: FTBFS: net_tls_TLSSession.cpp:120:38: error: 'gnutls_certificate_type_set_priority' was not declared in this scope

Carsten Schoenert c.schoenert at t-online.de
Tue Feb 2 21:22:44 UTC 2016


Hello,

Am 02.02.2016 um 07:41 schrieb Carsten Schoenert:
[...]
> Yes please please do so!
> We need a actual version of libvmime! As written on my email to Peter
> Green, I can't really understand why there is no new release since 2010
> by the background of the Snowden papers. Providing no security updates
> will users switch to better handled packages.

based on the message from Andreas Metzler, the debdiff from Peter Green
and some reading on the GnuTLS website I came to the conclusion that
removing all the insecure stuff from 'src/net/tls/TLSSession.cpp' and
using the GnuTLS default setting is the best solution for now. I have
taken the changes from peter Green and made a patch based on that for
the patch queue.
I did some more minor tweaks to the build and pushed this small update
in all on my GitHub tree for libvmime:

  https://github.com/tijuca/libvmime/commits/debian/sid

By this changes the package build is working again in unstable. Lintian
is still complaining about hardening issues, but these are marked as
informative and need some deeper investigating in the old Autotool files
I'm currently not willing to do.

Any objections critics on getting further?

-- 
Regards
Carsten Schoenert



More information about the Pkg-giraffe-discuss mailing list