Bug#854210: libnet-xmpp-perl: sendxmpp can't send message to hangouts (work fine for 1.02-5)

[gregor herrmann]

On Tue, 27 Jun 2017 21:06:20 +0200, Salvatore Bonaccorso wrote:

> > So far we have:
> > - a bug against libnet-xmpp-perl which is (at least partially) the wrong
> >   package; the change in Net::XMPP is that it starts to pass on the
> >   empty path to the ssl certs from sendxmpp to XML::Stream (before
> >   that it just ignored the path), so even if a change in Net::XMPP
> >   triggered the issues, it's not doing anything wrong and doesn't
> >   look like the place to fix anything;
> > - a probably inflated severity, as sendxmpp appears to work fine if a
> >   correct --tls-ca-path is passed on the command line (or probably in
> >   its config file?);
> > - the idea to make this all easier for users by setting a sane
> >   default in either sendxmpp or libxml-stream-perl;
> > - no indication that this affects anything else then sendxmpp
> >   (if I interpret Markus' message correctly).
> > 
> > Currently I tend to think that setting an empty path for tls-ca-path
> > is suboptimal behaviour in sendxmpp which should be fixed there.
> > 
> > But I'd welcome other opinions on this point.
> 
> Maybe I miss something obvious, but IMHO the bug should 1/ be
> reassigned to sendxmpp itself. Then the question is if sendxmpp should
> be patches actually (if so it might need to depend on
> ca-certificates), or "just" document when
> -tls-ca-path="/etc/ssl/certs" needs to be passed.

Thanks for your assessment which makes a lot of sense to me.
 
> Maybe not a really useful reply, and I was not involved in the whole
> discussion. But my gut feeling is that Net::XMPP is not at "fault"
> here in this case.

Ack, AFAICS Net::XMPP fixed a bug (ignoring the path to the certs)
and this triggered the necessity for sendxmpp to set it (by the user
or in the code). -- At the other end of the chain XML::Stream is just
a general-purpose low-level library, and changes there look like the
wrong place to me.


Unless new arguments come up in to near feature, I'm going to
reassign this bug to sendxmpp.


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Didier Squiban: Suite de gavottes des montagnes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20170627/e6b12d92/attachment.sig>