Package: libzmq5 Version: 4.3.1-3 Severity: important Justification: regression from Stretch
Dear Maintainer, GSSAPI support is no longer built in in the version in buster/sid. This is due to my mistake upstream when refactoring the autoconf file - the correct autoconf variable does not get set when using pkg-config to find the gssapi library. This can be noted in the dpkg-buildpackage log, that correctly detects that there's a linkage against the library but gssapi symbols are not used: dpkg-shlibdeps: warning: package could avoid a useless dependency if debian/libzmq5/usr/lib/x86_64-linux-gnu/libzmq.so.5.2.1 was not linked against libgssapi_krb5.so.2 (it uses none of the library's symbols) https://buildd.debian.org/status/fetch.php?pkg=zeromq3&arch=amd64&ver=4.3.1-3&stamp=1548515257&raw=0 $ objdump -T /usr/lib/x86_64-linux-gnu/libzmq.so.5.2.1 | grep gssapi | wc -l 0 The fix is simple, is already merged upstream and is also attached. After the fix: $ objdump -T src/.libs/libzmq.so.5.2.1 | grep gssapi | wc -l 13 Given this is a regression since stretch, it would be great if we could get this uploaded and approved for buster. I'm more than happy to deal with the paperwork and file a request with the Release Team myself, given it was my mistake. Thank you! -- Kind regards, Luca Boccassi
Author: Luca Boccassi <bl...@debian.org> Description: gssapi pkg-config check in configure.ac does not work correctly enable the definition in platform.hpp so that the gssapi support is actually built in if requested and available. Origin: https://github.com/zeromq/libzmq/pull/3361 --- a/configure.ac +++ b/configure.ac @@ -472,16 +472,20 @@ # conditionally require libgssapi_krb5 if test "x$require_libgssapi_krb5_ext" != "xno"; then PKG_CHECK_MODULES([gssapi_krb5], [krb5-gssapi], [ + have_gssapi_library="yes" PKGCFG_NAMES_PRIVATE="$PKGCFG_NAMES_PRIVATE krb5-gssapi" ], [ AC_CHECK_HEADERS(gssapi/gssapi_generic.h) AC_SEARCH_LIBS([gss_init_sec_context], [gssapi_krb5 gssapi], - AC_DEFINE(HAVE_LIBGSSAPI_KRB5, [1], [Enabled GSSAPI security]), + have_gssapi_library="yes", AC_MSG_ERROR(libgssapi_krb5 is needed for GSSAPI security)) PKGCFG_LIBS_PRIVATE="$PKGCFG_LIBS_PRIVATE -lgssapi_krb5" ]) fi -AM_CONDITIONAL(BUILD_GSSAPI, test "x$require_libgssapi_krb5_ext" != "xno") +if test "x$have_gssapi_library" = "xyes"; then + AC_DEFINE(HAVE_LIBGSSAPI_KRB5, [1], [Enabled GSSAPI security]) +fi +AM_CONDITIONAL(BUILD_GSSAPI, test "x$have_gssapi_library" = "xyes") # Select curve encryption library, defaults to tweetnacl # To use libsodium instead, use --with-libsodium (must be installed)
signature.asc
Description: This is a digitally signed message part
