Bug#859841: zurl: Please migrate to openssl1.1 in Buster
Dear readers of this long-standing bug ticket,
durign the last 3 weeks there was no real progress, but the release
team at least noticed the open transition request (#891872).
Unfortunately, there are some conflicts with other transitions.
("That means this will have to wait until there are no conflicting
ongoing transitions. I will ack this when that time comes.")
Well, at least there is some hope that this happens before the
transition freeze for buster. (2019-01-12)
Jan
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
Current state of affairs: - curl built against openssl 1.1 was uploaded to experimental https://tracker.debian.org/news/937117/accepted-curl-7580-3-source-amd64-all-into-experimental-experimental/ - zurl built against that version of curl and openssl 1.1 was uploaded to experimental https://tracker.debian.org/news/937630/accepted-zurl-191-2-source-amd64-into-experimental/ - transition was requested https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891872 It seems like now we are waiting for the package xmltooling: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891872#25 Any tests using the versions of zurl and curl from experimental are welcome. I'm especially interested in any validation that it's indeed not a problem to use zurl with openssl1.1 and a version of qt which is still using openssl1.0. (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891872#20) Jan
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
To keep this BTS entry up to date: Unfortunately, I didn't see any progress regarding the status of libcurl3 during the last ~3 weeks. :-( References: https://salsa.debian.org/debian/curl/merge_requests/2 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858398
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
To keep this BTS entry up to date: There seems to be some progress towards a solution at https://salsa.debian.org/debian/curl/merge_requests/2 On Fri, Dec 29, 2017 at 01:58:05PM +0100, Jan Niehusmann wrote: > After another 3 weeks, the status of libcurl3 unfortunately didn't > change at all. > > The discussion on https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858398 > continues really slowly, and there is no sign of actual progress :-( > > Jan >
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
After another 3 weeks, the status of libcurl3 unfortunately didn't change at all. The discussion on https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858398 continues really slowly, and there is no sign of actual progress :-( Jan
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
Just a small update to people following this issue: The qt5 already updated to openssl 1.1, so the only remaining blocker is curl. In https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858398 there is some discussion about the right way to update curl, but I hope some agreement will be reached, soon. As soon as libcurl with openssl 1.1 is available, I'll upload an updated package of zurl. Jan
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
block 859841 by 858398 859671 thanks On Thu, Oct 12, 2017 at 11:44:44PM +0200, Sebastian Andrzej Siewior wrote: > this is a remainder about the openssl transition [0]. We really want to > remove libssl1.0-dev from unstable for Buster. I will raise the severity > of this bug to serious in a month. Please react before that happens. I'd really like to react, and in fact zurl is compatible with openssl 1.1, and was already built against it with version 1.7.1-3 in January. Unfortunately, it depends on curl and qt5 to migrate as well. So it had to revert to openssl 1.0 (Bug#850881), and fixing this is blocked by Bug#858398 and Bug#859671. For qt5, it looks like an upgrade can be expected around the end of this year: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859671#24 So I think rainsing the severity of this bug in November is too early, as it doesn't seem to be possible to reasonably fix the bug by then. Jan
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
Hi, this is a remainder about the openssl transition [0]. We really want to remove libssl1.0-dev from unstable for Buster. I will raise the severity of this bug to serious in a month. Please react before that happens. [0] https://bugs.debian.org/871056#55 Sebastian
Bug#859841: zurl: Please migrate to openssl1.1 in Buster
Package: zurl Version: 1.7.1-4 Severity: important Tags: sid buster User: pkg-openssl-de...@lists.alioth.debian.org Usertags: openssl-1.1-trans control: block -1 by 858398 Please migrate to libssl-dev in the Buster cycle. The package switch to libssl1.0-dev due to curl, see #850881. Sebastian
