Hi,
* Varun Hiremath <[EMAIL PROTECTED]> [2007-06-10 13:13]:
>  Please find attached upstream's response to this bug and a
>  possible fix for this solution. I shall be releasing the new versions
>  of libmrss and libnxml soon. Sorry for the delay I was out of
>  station.

So where is your opinion about what he said?

> >   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=425483
> 
> There are 3 problems:
> 
> 1. the certificate of that server is wrong. You can set the option
> verifypeer to FALSE and libmrss works fine. This is a possible code for
> libnxml:
> 
> nxml_new(&nxml);
> nxml_set_certificate(nxml, NULL, NULL, NULL, 0);

This won't help its just a dirty workaround.

> about libmrss:
> 
> options=mrss_options_new(0, NULL, NULL, NULL, NULL, NULL, 0, NULL, NULL);
> mrss_parse_url_with_options("URL", &mrss, options);
> 
> 
> 2. You should use libnxml 0.17.3 and libmrrs 0.17.3. There was a bug
> about verifypeer flag: The previous releases used it only if the
> certificate (the second argument of nxml_set_certificate func) was not NULL.

This shows again that upstream has absolutly no clue about 
what he does. He changes a stable interface nearly everytime 
he does a new release without bumping the SONAME. This 
breaks every application using these libs. This really 
sucks, please watch this if you package new upstream 
version. So this is no option here. Just try it out, compile 
these libs and recompile newsbeuter, see segfaults.

Kind regards
Nico
-- 
Nico Golde - http://ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpb9dLI6nUFT.pgp
Description: PGP signature

Reply via email to