[Pkg-openssl-devel] Bug#861686: unblock: openssl/1.1.0e-2

[Sebastian Andrzej Siewior]

Package: release.debian.org
User: release.debian.org at packages.debian.org
Usertags: unblock
Severity: normal

I prepared an update to the openssl about which I seek your guidance
whether it is approriate for Stretch or not.
After the rewrite/update of the debian/rules file we gained the dh_perl
command which adds a dependency on the perl package for the openssl
package. This was considered "okay" because `c_rehash' needs perl.
In #860254 two people complained that this change made the openssl
"quite hefty". The `c_rehash' script works also with perl-base instead
so I changed it (dh_perl -d). And since perl-base is essential the perl
dependency is all gone in the resulting openssl package.

In terms of full disclosure: We also have `tsget' (including a man page)
which is in a non-standard path (/usr/lib/ssl/misc/) and would need
`libwww-curl-perl' to work. This is something we never had and it is
misc because upstream puts it there. We don't want to add this
dependency to the packet (especially at this point in the cycle). For
post-Stretch we will decide how we handle it.

unblock openssl/1.1.0e-2

Sebastian
-------------- next part --------------
diff -Nru openssl-1.1.0e/debian/changelog openssl-1.1.0e/debian/changelog
--- openssl-1.1.0e/debian/changelog	2017-02-16 18:57:58.000000000 +0100
+++ openssl-1.1.0e/debian/changelog	2017-05-01 21:50:37.000000000 +0200
@@ -1,3 +1,9 @@
+openssl (1.1.0e-2) unstable; urgency=medium
+
+  * Make openssl depend on perl-base (Closes: #860254)
+
+ -- Sebastian Andrzej Siewior <sebastian at breakpoint.cc>  Mon, 01 May 2017 21:50:37 +0200
+
 openssl (1.1.0e-1) unstable; urgency=high
 
   * New upstream version
diff -Nru openssl-1.1.0e/debian/rules openssl-1.1.0e/debian/rules
--- openssl-1.1.0e/debian/rules	2017-02-16 18:57:19.000000000 +0100
+++ openssl-1.1.0e/debian/rules	2017-05-01 21:50:37.000000000 +0200
@@ -133,6 +133,9 @@
 	fi
 	dh_fixperms -a -X etc/ssl/private
 
+override_dh_perl:
+	dh_perl -d
+
 override_dh_makeshlibs:
 	#dpkg-gensymbols -Pdebian/libssl1.1/ -plibssl1.1 -c4
 	dh_makeshlibs -a --add-udeb="libcrypto1.1-udeb" -Xengines
@@ -140,7 +143,7 @@
 	# that breaks debootstrap in jessie (the current stable). This hack
 	# could be removed once stretch is stable and contains a fixed
 	# debootstrap, see #836525
-	sed -i 's at perl:Depends=perl:any at perl:Depends=perl@' debian/openssl.substvars
+	#sed -i 's at perl:Depends=perl:any at perl:Depends=perl@' debian/openssl.substvars
 
 override_dh_shlibdeps:
 	sed -i '/^udeb: libssl/s/libcrypto1.1-udeb/libssl1.1-udeb/' debian/libssl1.1/DEBIAN/shlibs