[Pkg-utopia-maintainers] Bug#950096: flatpak: Flatpak fails to open SSL connections with p11-kit 0.23.19

[Simon McVittie]

On Tue, 28 Jan 2020 at 23:14:35 +0000, Lennart Weller wrote:
> From what I have gathered this requires a change of the runtime to
> interface with the p11-kit daemon correctly. But I don't know if that
> is something that can be quickly fixed on your side.

Changes to the runtime can only be done by the maintainers of the runtime.
As a maintainer of the flatpak Debian package, I do not control the apps
you have chosen to run, or the runtimes those apps have chosen to use.

I *do* control the version of the flatpak program that you're running
(when you get it from Debian), so if the best way to resolve this issue
turns out to involve code changes in the flatpak program, getting those
into Debian is something I'm responsible for. However, it isn't clear
yet whether code changes in flatpak would be helpful here.

I've opened https://github.com/p11-glue/p11-kit/issues/275 to ask the
upstream maintainers of p11-kit whether flatpak is doing something that
is expected to work (in which case this is a p11-kit bug), or whether
flatpak is doing something they consider to be unsupportable (in which
case the flatpak feature that shares the host p11-kit trust store with
the container would probably have to be removed), or something else.

    smcv