Debian Bug report logs - #374327
ssmtp: GPL code linked against OpenSSL without exception

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Mario Iseli <admin@marioiseli.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: ssmtp: GPL code linked against OpenSSL without exception

Date: Sun, 18 Jun 2006 17:44:59 +0200

Package: ssmtp
Severity: serious
Justification: Policy 2.3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

as written in debian/copyright ssmtp is now GPL. Your package is linked
against OpenSSL, which is not licensed under the GPL, this is a license
violation. Upstream should add an exception to the license (in COPYING)
which allows the linking with OpenSSL, this you should also write in
debian/copyright. The second choice would be to port ssmtp to gnutls which
is GPL.

- -- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-2-686
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFElXT7J9EDSN0bDvcRAqGOAJ99eZG1QYYanubBzPboAofXUgayigCfVoWc
x0o2Is+wv+Luv2Ckl7yT57E=
=3bt7
-----END PGP SIGNATURE-----

Message #10 received at 374327@bugs.debian.org (full text, mbox, reply):

From: Alejandro Ríos "P." <alejandro.rios@avatar.com.co>

To: 374327@bugs.debian.org

Subject: Working on this

Date: Thu, 10 Aug 2006 00:57:58 -0500

[Message part 1 (text/plain, inline)]

Hi.

I've already compiled ssmtp with libgnutls-dev, but I'm still testing
it. I just wanted to let people know I'm working on this issue.

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 374327@bugs.debian.org (full text, mbox, reply):

From: Alejandro Ríos "P." <alejandro.rios@avatar.com.co>

To: 374327@bugs.debian.org

Cc: Santiago Ruano Rincón <santiago@debian.org>

Subject: patch

Date: Thu, 10 Aug 2006 02:05:44 -0500

[Message part 1 (text/plain, inline)]

This is a simple/obvious port from openssl to gnutls and has not been
completely tested, that's why I think it should go to experimental. The
simple functions of the package work fine with this (this message is
being sent with a patched ssmtp as a proof).

Regards.


Index: debian/control
===================================================================
--- debian/control      (revisión: 20)
+++ debian/control      (copia de trabajo)
@@ -3,7 +3,7 @@
 Priority: extra
 Maintainer: Anibal Monsalve Salazar <anibal@debian.org>
 Uploaders: Santiago Ruano Rincón <santiago@debian.org>
-Build-Depends: po-debconf, libssl-dev
+Build-Depends: po-debconf, libgnutls-dev
 Standards-Version: 3.7.2

 Package: ssmtp
Index: debian/changelog
===================================================================
--- debian/changelog    (revisión: 20)
+++ debian/changelog    (copia de trabajo)
@@ -1,6 +1,7 @@
-ssmtp (2.61-8) UNRELEASED; urgency=low
+ssmtp (2.61-8) experimental; urgency=high

-  * NOT RELEASED YET
+  [ Alejandro Rios ]
+  * Initial port from openssl to gnutls (Closes: #374327)

  -- Santiago Ruano Rincón <santiago@debian.org>  Sat, 24 Jun 2006
12:39:51 -0500

Index: ssmtp.c
===================================================================
--- ssmtp.c     (revisión: 20)
+++ ssmtp.c     (copia de trabajo)
@@ -28,11 +28,7 @@
 #include <ctype.h>
 #include <netdb.h>
 #ifdef HAVE_SSL
-#include <openssl/crypto.h>
-#include <openssl/x509.h>
-#include <openssl/pem.h>
-#include <openssl/ssl.h>
-#include <openssl/err.h>
+#include <gnutls/openssl.h>
 #endif
 #ifdef MD5AUTH
 #include "md5auth/hmac_md5.h"







-- 
Alejandro Ríos Peña
 Avatar Ltda.
 Bogotá D.C.
 (+57) 300 390 4764

[signature.asc (application/pgp-signature, inline)]

Message #22 received at 374327-close@bugs.debian.org (full text, mbox, reply):

From: Santiago Ruano Rincón <santiago@debian.org>

To: 374327-close@bugs.debian.org

Subject: Bug#374327: fixed in ssmtp 2.61-8

Date: Fri, 11 Aug 2006 19:17:14 -0700

Source: ssmtp
Source-Version: 2.61-8

We believe that the bug you reported is fixed in the latest version of
ssmtp, which is due to be installed in the Debian FTP archive:

ssmtp_2.61-8.diff.gz
  to pool/main/s/ssmtp/ssmtp_2.61-8.diff.gz
ssmtp_2.61-8.dsc
  to pool/main/s/ssmtp/ssmtp_2.61-8.dsc
ssmtp_2.61-8_i386.deb
  to pool/main/s/ssmtp/ssmtp_2.61-8_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 374327@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Santiago Ruano Rincón <santiago@debian.org> (supplier of updated ssmtp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 10 Aug 2006 11:02:01 -0500
Source: ssmtp
Binary: ssmtp
Architecture: source i386
Version: 2.61-8
Distribution: unstable
Urgency: medium
Maintainer: Anibal Monsalve Salazar <anibal@debian.org>
Changed-By: Santiago Ruano Rincón <santiago@debian.org>
Description: 
 ssmtp      - extremely simple MTA to get mail off the system to a mail hub
Closes: 374327 376345
Changes: 
 ssmtp (2.61-8) unstable; urgency=medium
 .
   [ Santiago Ruano Rincón ]
   * Updated fr.po, by Michel Grentzinger <mic.grentz@online.fr>
     (Closes: #376345)
 .
   [ Alejandro Rios ]
   * Initial port from openssl to gnutls (Closes: #374327)
 .
   [ Anibal Monsalve Salazar ]
   * configure: replaced -lssl with /usr/lib/libgnutls-openssl.so.
     See #374327.
   * ssmtp.c: replaced SSL_CTX_use_certificate_chain_file with
     SSL_CTX_use_certificate_file and marked SSL_CTX_check_private_key
     as not used. See #374327.
Files: 
 d752b0731346059a5df036a4067c31b1 621 mail extra ssmtp_2.61-8.dsc
 e6f031c5987fc128852d6be0e23d0901 30234 mail extra ssmtp_2.61-8.diff.gz
 d3b2202d02012ae475bba3ef32942c0a 37618 mail extra ssmtp_2.61-8_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFE3TdGipBneRiAKDwRAqZYAJ9W/JZztI59IfT+UF4IFAATd7bSDgCglb8r
v8ih04Ii7GPEKKd0Bx7Qx3o=
=ypkg
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.