[Pkg-gtkpod-devel] Bug#1076544: Built with wrong SSL lib, won't talk to iOS 5

[Patrick Hibbs]

Package: libimobiledevice6
Version: 1.3.0-6
Followup-For: Bug #1076544
X-Debbugs-Cc: hibbsncc1701 at gmail.com

Dear Maintainer,

After following the steps in the initial report, I can confirm that they fix
the issue for my iPod Touch (2nd Generation) which uses iOS 4.

I've attached a diff with the needed debian/control and debian/rules changes.
It would be nice if this was fixed in the archive, so people with legacy iOS
devices don't have to try and hunt down what "lockdown error -5" means.

(Maintainer Note: The changed dependencies in this reply are because I rebuilt
and
installed the fixed package on my system with the attached diff.

libgcrypt20 and libgnutls30, as of this reply, are *NOT* dependencies of
libimobiledevice6 in
the Debian archive, and they *need to be* for this bug to be fixed.)

-- Patrick Hibbs


-- System Information:
Debian Release: 12.12
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64

Kernel: Linux 6.1.0-41-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libimobiledevice6 depends on:
ii  libc6        2.36-9+deb12u13
ii  libgcrypt20  1.10.1-3
ii  libgnutls30  3.7.9-2+deb12u5
ii  libplist3    2.2.0-6+b2
ii  libtasn1-6   4.19.0-2+deb12u1
ii  libusbmuxd6  2.0.2-3

Versions of packages libimobiledevice6 recommends:
ii  usbmuxd  1.1.1-2

Versions of packages libimobiledevice6 suggests:
pn  libusbmuxd-tools  <none>

-- no debconf information
-------------- next part --------------
--- debian/control	2021-01-26 02:56:24.000000000 -0500
+++ debian/control	2026-01-12 00:49:22.156303778 -0500
@@ -10,6 +10,8 @@
                dh-python,
                libglib2.0-dev (>= 2.14.1),
                libssl-dev,
+               libgnutls28-dev,
+               libgcrypt20-dev,
                libplist-dev (>= 2.2.0),
                libusb-1.0-0-dev (>= 1.0.3) [linux-any],
                libusbmuxd-dev (>= 2.0.2),
--- debian/rules	2021-01-26 02:56:24.000000000 -0500
+++ debian/rules	2026-01-12 00:48:18.470354763 -0500
@@ -3,11 +3,17 @@
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed -Wl,-O1 -Wl,-z,defs
 export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
+# Debian Bug: #1076544:
+# Use of OpenSSL must be disabled or legacy iOS devices will be unable to connect via USB.; Use GnuTLS instead.
+# (usbmuxd will print lockdown error -5 in it's log for the ssl handshake failure.)
+# As those legacy iOS devices do NOT support modern TLS ciphers, and OpenSSL has removed support
+# for all of the usable ciphers.
 configure_flags += \
 		--prefix=/usr \
 		--sysconfdir=/etc \
 		--enable-dev-tools \
-		--disable-silent-rules
+		--disable-silent-rules \
+		--disable-openssl
 
 %:
 	dh $@ --with=python3