Laszlo Boszormenyi wrote:
>> No, this is a very bad idea.  No application linking against libneon should
>> *care* whether it's linked with gnutls or not; you should *not* expose this
>> in the library name.
>  You are right, that's why I made them conflict with each other, as both
> provide the same library name. Would be the proposed -dev change be
> acceptable?

Better -dev conflict than have apps uninstallable. It is common sense!

Also, the applications do not care which lib they are linked with, but
the license does => legal does => Debian does.

>> The question is, *why provide a version of neon linked against OpenSSL at
>> all*?
>  Upstream develop with OpenSSL, GnuTLS support has been just added, not
> tested too much. Should work, but close to releasing Etch I don't want
> to break Subversion and/or OpenOffice.org . Still, upstream will develop
> with OpenSSL, I can not garantee that it will always work and have the
> same security support. Also it would fetch more dependencies (GnuTLS
> related just for neon) and I don't know if Subversion serving over https
> would interfere with Apache2 or not. Reason: Apache2 is linked with
> OpenSSL, Subversion and neon will be linked with GnuTLS.
>  For now, I will ask what upstream says about this. Please decide if I
> should switch to GnuTLS support only; but then please schedule binNMUs
> for Subversion and OpenOffice.org .

I agree. GnuTLS is not a well tested replacement for OpenSSL. Possibly
breaking OpenOffice is not a good idea either.

- Adam



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to