[Pkg-swan-devel] Bug#848890: Bug#848890: Revisiting "Ubuntu strongSwan changes"

Christian Ehrhardt christian.ehrhardt at canonical.com
Wed Dec 21 09:32:26 UTC 2016


Background to explain the reasoning behind the change 2/7:

Commits:
944a3c7 * d/rules: Make override_dh_strip a nop.
b7754fe changelog: d/rules: Make override_dh_strip a nop

The (to be enabled in a later commit in this series) plugin "integrity-test"
provides a useful extra feature for the cautious strongswan admin.
It stores checksums of its libraries and can check non-malicious errors to
avoid accidentially loading bad libraries.
See https://wiki.strongswan.org/projects/strongswan/wiki/IntegrityTest for
more.

It is an experimental feature, but out there for a while and was enabled in
Ubuntu per user request, so I assume it has its use in the field.

To be able to do so it stores the checksums as part of the build process.
But to match those sums later on the build is not allowed to strip the
plugins.
That is listed in the "conflicts" section of the Wiki page.

Therefore override "override_dh_strip:" with a comment that explains why
strip
is skipped.
​
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-swan-devel/attachments/20161221/e27dbf58/attachment.html>


More information about the Pkg-swan-devel mailing list