[Pkg-swan-devel] Bug#828561: Bug#828561: Bug#828561: strongswan: FTBFS with openssl 1.1.0

[Yves-Alexis Perez]

On Tue, Jun 28, 2016 at 01:37:01PM +0200, Yves-Alexis Perez wrote:
> On Sun, Jun 26, 2016 at 12:24:16PM +0200, Kurt Roeckx wrote:
> > Source: strongswan
> > Version: 5.4.0-1
> > Severity: important
> > Control: block 827061 by -1
> > 
> > Hi,
> > 
> > OpenSSL 1.1.0 is about to released.  During a rebuild of all packages using
> > OpenSSL this package fail to build.  A log of that build can be found at:
> > https://breakpoint.cc/openssl-1.1-rebuild-2016-05-29/Attempted/strongswan_5.4.0-1_amd64-20160529-1540
> > 
> > On https://wiki.openssl.org/index.php/1.1_API_Changes you can see various of the
> > reasons why it might fail.  There are also updated man pages at
> > https://www.openssl.org/docs/manmaster/ that should contain useful information.
> > 
> > There is a libssl-dev package available in experimental that contains a recent
> > snapshot, I suggest you try building against that to see if everything works.
> > 
> > If you have problems making things work, feel free to contact us.
> Hey,
> 
> I've reported this upstream, and they provided a patch which I'm gonna
> try against current OpenSSL and 1.1.0 to be sure. Not sure when I'll
> have time but I'll keep you posted.

But the patch doesn't apply to 5.4.0 and 5.5 is due in 13 days. I don't
think it's really worth backporting it so I'll do some local tests but
won't upload anything before 5.5.0. I hope the timeframes will be
compatible but there might be some FTBFS at one point.

I guess if we really need to remove strongSwan 5.4 from testing at one
point to allow openssl 1.1.0 to migrate, it's ok (although we're not
here yet).

Regards.
-- 
Yves-Alexis Perez
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-swan-devel/attachments/20160628/bf0404d4/attachment.sig>