[Pkg-netatalk-devel] Uploading netatalk_3.1.15~ds-3

[Daniel Markstedt]

------- Original Message -------
On Tuesday, August 29th, 2023 at 9:18 AM, Jonas Smedegaard <jonas at jones.dk> wrote:


> 
> 
> Quoting Daniel Markstedt (2023-08-29 04:41:46)
> 
> > I have prepared a changeset for a netatalk_3.1.15~ds-3 package.
> > This is a stopgap release primarily to cherry-pick this critical fix:
> > https://github.com/Netatalk/netatalk/pull/178
> > 
> > Would you be able to check and upload this?
> 
> 
> Done!
> 

Yay! Thank you for the quick turnaround. I'll try to get the DEP-3 headers right the next time.

> > If you follow the referenced issue tickets, you can see that a large number of users have been reporting being impacted, and this is probably just the tip of the iceberg.
> > So I think it's important to get this out now so that I can point people to the Debian unstable package as something they can use.
> > 
> > I also made a few fixes to appease lintian (which I agree are good fixes).
> 
> 
> No need for defending the changes - they are clearly all progress :-)
> 
> Where you might need defending/clarification is (when package is in
> stable, and) when you want to do a stable update: Then you want to argue
> your case towards the release team, which is (for good reason!) hesitant
> to introduce changes to the stable branch of Debian.
> 

Well noted.

> > Two TODOs added:
> > 
> > - I couldn't figure out how to make the "package-name-doesnt-match-sonames" lintian-overrides to take effect
> 
> 
> What did you try?
> 
> Wild guess is that you out it in wrong file - it should be file
> debian/netatalk.lintian-overrides
> 

That was it! The lintian man page does talk about the [package_name].lintian-overrides file, but didn't say that the purpose was different to the one in source/  ...

> > - OpenSSL 3.0 broke compatibility with DHX (by mandating more secure cryptography). My current lead is to link with WolfSSL. Alternatively, bundle OpenSSL 1.1.1 -- https://github.com/Netatalk/netatalk/issues/358
> 
> 
> Bundling OpenSSL is a no-go for Debian: Too risky a library to "hide" by
> embedding it. So I cross my fingers that you will succeed in getting it
> to work with WolfSSL.
> 
> 
> - Jonas
> 

That's what I figured. Those openssl dual-licensing terms aren't pretty.

Daniel