[pkg-opensc-maint] Bug#1063258: pkcs11-helper: NMU diff for 64-bit time_t transition

[Lucas Kanashiro]

Source: pkcs11-helper
Version: 1.29.0-2
Severity: serious
Tags: patch pending sid trixie
Justification: library ABI skew on upgrade
User: debian-arm at lists.debian.org
Usertags: time-t

NOTICE: these changes must not be uploaded to unstable yet!

Dear maintainer,

As part of the 64-bit time_t transition required to support 32-bit
architectures in 2038 and beyond
(https://wiki.debian.org/ReleaseGoals/64bit-time), we have identified
pkcs11-helper as a source package shipping runtime libraries whose ABI
either is affected by the change in size of time_t, or could not be
analyzed via abi-compliance-checker (and therefore to be on the safe
side we assume is affected).

To ensure that inconsistent combinations of libraries with their
reverse-dependencies are never installed together, it is necessary to
have a library transition, which is most easily done by renaming the
runtime library package.

Since turning on 64-bit time_t is being handled centrally through a change
to the default dpkg-buildflags (https://bugs.debian.org/1037136), it is
important that libraries affected by this ABI change all be uploaded close
together in time.  Therefore I have prepared a 0-day NMU for pkcs11-helper
which will initially be uploaded to experimental if possible, then to
unstable after packages have cleared binary NEW.

Please find the patch for this NMU attached.

If you have any concerns about this patch, please reach out ASAP.  Although
this package will be uploaded to experimental immediately, there will be a
period of several days before we begin uploads to unstable; so if information
becomes available that your package should not be included in the transition,
there is time for us to amend the planned uploads.



-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.2.0-39-generic (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
-------------- next part --------------
diff -Nru pkcs11-helper-1.29.0/debian/changelog pkcs11-helper-1.29.0/debian/changelog
--- pkcs11-helper-1.29.0/debian/changelog	2023-08-21 10:11:30.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/changelog	2024-02-05 18:47:42.000000000 -0300
@@ -1,3 +1,10 @@
+pkcs11-helper (1.29.0-2.1) experimental; urgency=medium
+
+  * Non-maintainer upload.
+  * Rename libraries for 64-bit time_t transition.
+
+ -- Lucas Kanashiro <kanashiro at debian.org>  Mon, 05 Feb 2024 18:47:42 -0300
+
 pkcs11-helper (1.29.0-2) unstable; urgency=medium
 
   * Team upload
diff -Nru pkcs11-helper-1.29.0/debian/control pkcs11-helper-1.29.0/debian/control
--- pkcs11-helper-1.29.0/debian/control	2023-08-21 10:08:48.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/control	2024-02-05 18:47:42.000000000 -0300
@@ -20,7 +20,7 @@
 Provides: libpkcs11-helper-dev
 Conflicts: libpkcs11-helper-dev
 Depends: libjs-jquery,
-         libpkcs11-helper1 (= ${binary:Version}),
+         libpkcs11-helper1t64 (= ${binary:Version}),
          libssl-dev,
          ${misc:Depends}
 Description: library that simplifies the interaction with PKCS#11
@@ -37,7 +37,10 @@
  attributes are usually vendor specific, and 99% of application need to
  access existing objects in order to perform signature and decryption.
 
-Package: libpkcs11-helper1
+Package: libpkcs11-helper1t64
+Provides: ${t64:Provides}
+Replaces: libpkcs11-helper1
+Breaks: libpkcs11-helper1 (<< ${source:Version})
 Architecture: any
 Multi-Arch: same
 Pre-Depends: ${misc:Pre-Depends}
diff -Nru pkcs11-helper-1.29.0/debian/libpkcs11-helper1.install pkcs11-helper-1.29.0/debian/libpkcs11-helper1.install
--- pkcs11-helper-1.29.0/debian/libpkcs11-helper1.install	2023-08-21 10:08:48.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/libpkcs11-helper1.install	1969-12-31 21:00:00.000000000 -0300
@@ -1,2 +0,0 @@
-usr/lib/*/lib*.so.*
-usr/share/man
diff -Nru pkcs11-helper-1.29.0/debian/libpkcs11-helper1.symbols pkcs11-helper-1.29.0/debian/libpkcs11-helper1.symbols
--- pkcs11-helper-1.29.0/debian/libpkcs11-helper1.symbols	2023-08-21 10:08:48.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/libpkcs11-helper1.symbols	1969-12-31 21:00:00.000000000 -0300
@@ -1,85 +0,0 @@
-libpkcs11-helper.so.1 libpkcs11-helper1 #MINVER#
-* Build-Depends-Package: libpkcs11-helper1-dev
- pkcs11h_addProvider at Base 1.05
- pkcs11h_certificate_create at Base 1.05
- pkcs11h_certificate_decrypt at Base 1.05
- pkcs11h_certificate_decryptAny at Base 1.05
- pkcs11h_certificate_decryptAny_ex at Base 1.28
- pkcs11h_certificate_decrypt_ex at Base 1.28
- pkcs11h_certificate_deserializeCertificateId at Base 1.05
- pkcs11h_certificate_duplicateCertificateId at Base 1.05
- pkcs11h_certificate_ensureCertificateAccess at Base 1.05
- pkcs11h_certificate_ensureKeyAccess at Base 1.05
- pkcs11h_certificate_enumCertificateIds at Base 1.05
- pkcs11h_certificate_enumTokenCertificateIds at Base 1.05
- pkcs11h_certificate_freeCertificate at Base 1.05
- pkcs11h_certificate_freeCertificateId at Base 1.05
- pkcs11h_certificate_freeCertificateIdList at Base 1.05
- pkcs11h_certificate_getCertificateBlob at Base 1.05
- pkcs11h_certificate_getCertificateId at Base 1.05
- pkcs11h_certificate_getPromptMask at Base 1.05
- pkcs11h_certificate_getUserData at Base 1.05
- pkcs11h_certificate_lockSession at Base 1.05
- pkcs11h_certificate_releaseSession at Base 1.05
- pkcs11h_certificate_serializeCertificateId at Base 1.05
- pkcs11h_certificate_setCertificateIdCertificateBlob at Base 1.05
- pkcs11h_certificate_setPromptMask at Base 1.05
- pkcs11h_certificate_setUserData at Base 1.05
- pkcs11h_certificate_sign at Base 1.05
- pkcs11h_certificate_signAny at Base 1.05
- pkcs11h_certificate_signAny_ex at Base 1.28
- pkcs11h_certificate_signRecover at Base 1.05
- pkcs11h_certificate_signRecover_ex at Base 1.28
- pkcs11h_certificate_sign_ex at Base 1.28
- pkcs11h_certificate_unwrap at Base 1.05
- pkcs11h_certificate_unwrap_ex at Base 1.28
- pkcs11h_data_del at Base 1.05
- pkcs11h_data_enumDataObjects at Base 1.05
- pkcs11h_data_freeDataIdList at Base 1.05
- pkcs11h_data_get at Base 1.05
- pkcs11h_data_put at Base 1.05
- pkcs11h_engine_setCrypto at Base 1.05
- pkcs11h_engine_setSystem at Base 1.05
- pkcs11h_forkFixup at Base 1.05
- pkcs11h_getFeatures at Base 1.05
- pkcs11h_getLogLevel at Base 1.05
- pkcs11h_getMessage at Base 1.05
- pkcs11h_getProperty at Base 1.28
- pkcs11h_getVersion at Base 1.05
- pkcs11h_initialize at Base 1.05
- pkcs11h_initializeProvider at Base 1.28
- pkcs11h_logout at Base 1.05
- pkcs11h_openssl_createSession at Base 1.05
- pkcs11h_openssl_freeSession at Base 1.05
- pkcs11h_openssl_getCleanupHook at Base 1.05
- pkcs11h_openssl_getX509 at Base 1.05
- pkcs11h_openssl_session_getEVP at Base 1.11
- pkcs11h_openssl_session_getRSA at Base 1.05
- pkcs11h_openssl_session_getX509 at Base 1.05
- pkcs11h_openssl_setCleanupHook at Base 1.05
- pkcs11h_plugAndPlay at Base 1.05
- pkcs11h_registerProvider at Base 1.28
- pkcs11h_removeProvider at Base 1.05
- pkcs11h_setForkMode at Base 1.05
- pkcs11h_setLogHook at Base 1.05
- pkcs11h_setLogLevel at Base 1.05
- pkcs11h_setMaxLoginRetries at Base 1.05
- pkcs11h_setPINCachePeriod at Base 1.05
- pkcs11h_setPINPromptHook at Base 1.05
- pkcs11h_setProperty at Base 1.28
- pkcs11h_setProtectedAuthentication at Base 1.05
- pkcs11h_setProviderProperty at Base 1.28
- pkcs11h_setProviderPropertyByName at Base 1.28
- pkcs11h_setSlotEventHook at Base 1.05
- pkcs11h_setTokenPromptHook at Base 1.05
- pkcs11h_terminate at Base 1.05
- pkcs11h_token_deserializeTokenId at Base 1.05
- pkcs11h_token_duplicateTokenId at Base 1.05
- pkcs11h_token_ensureAccess at Base 1.05
- pkcs11h_token_enumTokenIds at Base 1.05
- pkcs11h_token_freeTokenId at Base 1.05
- pkcs11h_token_freeTokenIdList at Base 1.05
- pkcs11h_token_login at Base 1.05
- pkcs11h_token_logout at Base 1.10-2~
- pkcs11h_token_sameTokenId at Base 1.05
- pkcs11h_token_serializeTokenId at Base 1.05
diff -Nru pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.install pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.install
--- pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.install	1969-12-31 21:00:00.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.install	2023-08-21 10:08:48.000000000 -0300
@@ -0,0 +1,2 @@
+usr/lib/*/lib*.so.*
+usr/share/man
diff -Nru pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.lintian-overrides pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.lintian-overrides
--- pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.lintian-overrides	1969-12-31 21:00:00.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.lintian-overrides	2024-02-05 18:47:42.000000000 -0300
@@ -0,0 +1 @@
+libpkcs11-helper1t64: package-name-doesnt-match-sonames libpkcs11-helper1
diff -Nru pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.symbols pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.symbols
--- pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.symbols	1969-12-31 21:00:00.000000000 -0300
+++ pkcs11-helper-1.29.0/debian/libpkcs11-helper1t64.symbols	2024-02-05 18:47:42.000000000 -0300
@@ -0,0 +1,85 @@
+libpkcs11-helper.so.1 libpkcs11-helper1t64 #MINVER#
+* Build-Depends-Package: libpkcs11-helper1-dev
+ pkcs11h_addProvider at Base 1.05
+ pkcs11h_certificate_create at Base 1.05
+ pkcs11h_certificate_decrypt at Base 1.05
+ pkcs11h_certificate_decryptAny at Base 1.05
+ pkcs11h_certificate_decryptAny_ex at Base 1.28
+ pkcs11h_certificate_decrypt_ex at Base 1.28
+ pkcs11h_certificate_deserializeCertificateId at Base 1.05
+ pkcs11h_certificate_duplicateCertificateId at Base 1.05
+ pkcs11h_certificate_ensureCertificateAccess at Base 1.05
+ pkcs11h_certificate_ensureKeyAccess at Base 1.05
+ pkcs11h_certificate_enumCertificateIds at Base 1.05
+ pkcs11h_certificate_enumTokenCertificateIds at Base 1.05
+ pkcs11h_certificate_freeCertificate at Base 1.05
+ pkcs11h_certificate_freeCertificateId at Base 1.05
+ pkcs11h_certificate_freeCertificateIdList at Base 1.05
+ pkcs11h_certificate_getCertificateBlob at Base 1.05
+ pkcs11h_certificate_getCertificateId at Base 1.05
+ pkcs11h_certificate_getPromptMask at Base 1.05
+ pkcs11h_certificate_getUserData at Base 1.05
+ pkcs11h_certificate_lockSession at Base 1.05
+ pkcs11h_certificate_releaseSession at Base 1.05
+ pkcs11h_certificate_serializeCertificateId at Base 1.05
+ pkcs11h_certificate_setCertificateIdCertificateBlob at Base 1.05
+ pkcs11h_certificate_setPromptMask at Base 1.05
+ pkcs11h_certificate_setUserData at Base 1.05
+ pkcs11h_certificate_sign at Base 1.05
+ pkcs11h_certificate_signAny at Base 1.05
+ pkcs11h_certificate_signAny_ex at Base 1.28
+ pkcs11h_certificate_signRecover at Base 1.05
+ pkcs11h_certificate_signRecover_ex at Base 1.28
+ pkcs11h_certificate_sign_ex at Base 1.28
+ pkcs11h_certificate_unwrap at Base 1.05
+ pkcs11h_certificate_unwrap_ex at Base 1.28
+ pkcs11h_data_del at Base 1.05
+ pkcs11h_data_enumDataObjects at Base 1.05
+ pkcs11h_data_freeDataIdList at Base 1.05
+ pkcs11h_data_get at Base 1.05
+ pkcs11h_data_put at Base 1.05
+ pkcs11h_engine_setCrypto at Base 1.05
+ pkcs11h_engine_setSystem at Base 1.05
+ pkcs11h_forkFixup at Base 1.05
+ pkcs11h_getFeatures at Base 1.05
+ pkcs11h_getLogLevel at Base 1.05
+ pkcs11h_getMessage at Base 1.05
+ pkcs11h_getProperty at Base 1.28
+ pkcs11h_getVersion at Base 1.05
+ pkcs11h_initialize at Base 1.05
+ pkcs11h_initializeProvider at Base 1.28
+ pkcs11h_logout at Base 1.05
+ pkcs11h_openssl_createSession at Base 1.05
+ pkcs11h_openssl_freeSession at Base 1.05
+ pkcs11h_openssl_getCleanupHook at Base 1.05
+ pkcs11h_openssl_getX509 at Base 1.05
+ pkcs11h_openssl_session_getEVP at Base 1.11
+ pkcs11h_openssl_session_getRSA at Base 1.05
+ pkcs11h_openssl_session_getX509 at Base 1.05
+ pkcs11h_openssl_setCleanupHook at Base 1.05
+ pkcs11h_plugAndPlay at Base 1.05
+ pkcs11h_registerProvider at Base 1.28
+ pkcs11h_removeProvider at Base 1.05
+ pkcs11h_setForkMode at Base 1.05
+ pkcs11h_setLogHook at Base 1.05
+ pkcs11h_setLogLevel at Base 1.05
+ pkcs11h_setMaxLoginRetries at Base 1.05
+ pkcs11h_setPINCachePeriod at Base 1.05
+ pkcs11h_setPINPromptHook at Base 1.05
+ pkcs11h_setProperty at Base 1.28
+ pkcs11h_setProtectedAuthentication at Base 1.05
+ pkcs11h_setProviderProperty at Base 1.28
+ pkcs11h_setProviderPropertyByName at Base 1.28
+ pkcs11h_setSlotEventHook at Base 1.05
+ pkcs11h_setTokenPromptHook at Base 1.05
+ pkcs11h_terminate at Base 1.05
+ pkcs11h_token_deserializeTokenId at Base 1.05
+ pkcs11h_token_duplicateTokenId at Base 1.05
+ pkcs11h_token_ensureAccess at Base 1.05
+ pkcs11h_token_enumTokenIds at Base 1.05
+ pkcs11h_token_freeTokenId at Base 1.05
+ pkcs11h_token_freeTokenIdList at Base 1.05
+ pkcs11h_token_login at Base 1.05
+ pkcs11h_token_logout at Base 1.10-2~
+ pkcs11h_token_sameTokenId at Base 1.05
+ pkcs11h_token_serializeTokenId at Base 1.05