Debian Bug report logs - #622140
neon27: symbol SSLv2_server_method used

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Kurt Roeckx <kurt@roeckx.be>

To: submit@bugs.debian.org

Subject: neon27: symbol SSLv2_server_method used

Date: Sun, 10 Apr 2011 17:07:59 +0200

Package: neon27
Version: 0.29.5-3
Severity: serious

Hi,

Your package gives this warning when build using openssl 1.0.0:
dpkg-shlibdeps: warning: symbol SSLv2_server_method used by debian/libneon27/usr/lib/libneon.so.27.2.5 found in none of the libraries.

SSLv2 support got disabled and the related SSLv2_* method's got
removed.  Since you still seem to be using that symbol even
when both the header and the library doesn't provide it anymore,
it's likely this will result in a runtime error instead of a
compile time error.

You can check that SSLv2 support has been disabled by checking
for the OPENSSL_NO_SSL2 define.  But I suggest you just remove
SSLv2 support.


Kurt

Message #14 received at 622140@bugs.debian.org (full text, mbox, reply):

From: Julien Cristau <jcristau@debian.org>

To: Kurt Roeckx <kurt@roeckx.be>, 622140@bugs.debian.org

Subject: Re: Bug#622140: neon27: symbol SSLv2_server_method used

Date: Sat, 2 Jul 2011 13:14:36 +0200

[Message part 1 (text/plain, inline)]

tag 622140 + patch

On Sun, Apr 10, 2011 at 17:07:59 +0200, Kurt Roeckx wrote:

> SSLv2 support got disabled and the related SSLv2_* method's got
> removed.  Since you still seem to be using that symbol even
> when both the header and the library doesn't provide it anymore,
> it's likely this will result in a runtime error instead of a
> compile time error.
> 
> You can check that SSLv2 support has been disabled by checking
> for the OPENSSL_NO_SSL2 define.  But I suggest you just remove
> SSLv2 support.
> 
I'll do you one better and suggest you drop openssl support entirely.
Nothing in the archive seems to depend on it, everything uses
libneon27-gnutls instead.

Patch below, I'll consider NMUing in a few days if I don't hear
otherwise.

diff --git a/debian/changelog b/debian/changelog
index 4099d67..ddc0883 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+neon27 (0.29.5-3.1) UNRELEASED; urgency=low
+
+  * Non-maintainer upload.
+  * Stop building the openssl variant.  No package in Debian uses it anymore.
+    As a side effect, we don't FTBFS with new openssl (closes: #622140)
+  * Also drop the old transitional libneon25-dev.
+
+ -- Julien Cristau <jcristau@debian.org>  Sat, 02 Jul 2011 13:05:26 +0200
+
 neon27 (0.29.5-3) unstable; urgency=medium
 
   * Don't use \ for line continuation in the parameter of
diff --git a/debian/control b/debian/control
index b1656f9..78ebc99 100644
--- a/debian/control
+++ b/debian/control
@@ -2,68 +2,10 @@ Source: neon27
 Section: net
 Priority: optional
 Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
-Build-Depends: debhelper (>= 5.0.0), pkg-config, libxml2-dev, libssl-dev (>= 0.9.8c), libgnutls-dev (>= 2.8.3), libkrb5-dev, libz-dev, autotools-dev, binutils (>= 2.14.90.0.7), ca-certificates, chrpath
+Build-Depends: debhelper (>= 5.0.0), pkg-config, libxml2-dev, libgnutls-dev (>= 2.8.3), libkrb5-dev, libz-dev, autotools-dev, binutils (>= 2.14.90.0.7), ca-certificates, chrpath
 Homepage: http://www.webdav.org/neon/
 Standards-Version: 3.9.1
 
-Package: libneon27
-Section: libs
-Architecture: any
-Depends: ${shlibs:Depends}, ${misc:Depends}
-Description: An HTTP and WebDAV client library
- neon is an HTTP and WebDAV client library, with a C language API.
- .
- WARNING: THE NEON API IS NOT YET STABLE.
- .
- Provides lower-level interfaces to directly implement new HTTP
- methods, and higher-level interfaces so that you don't have to
- worry about the lower-level stuff.
- .
- Current features:
-   * High-level interface to HTTP and WebDAV methods (PUT, GET, HEAD, etc.)
-   * Low-level interface to HTTP request handling, to allow implementing
-     new methods easily.
-   * persistent connections
-   * RFC2617 basic and digest authentication (including auth-int, md5-sess)
-   * Proxy support (including basic/digest authentication)
-   * SSL/TLS support using OpenSSL (including client certificate and thread
-     safety support)
-   * Generic WebDAV 207 XML response handling mechanism
-   * XML parsing using the expat or libxml parsers
-   * Easy generation of error messages from 207 error responses
-   * WebDAV resource manipulation: MOVE, COPY, DELETE, MKCOL.
-   * WebDAV metadata support: set and remove properties, query any set ofi
-     properties (PROPPATCH/PROPFIND).
-   * autoconf macros supplied for easily embedding neon directly inside an
-     application source tree.
-
-Package: libneon27-dev
-Section: libdevel
-Architecture: any
-Conflicts: libneon-dev, libneon24-doc (<= 0.24.5-1), libneon25-dev (<< 0.28.2-5), libneon27-gnutls-dev
-Provides: libneon-dev
-Replaces: libneon-dev, libneon25-dev, libneon27-gnutls-dev
-Depends: ${misc:Depends}, libneon27 (= ${binary:Version}), libssl-dev, libxml2-dev, libkrb5-dev, pkg-config
-Description: Header and static library files for libneon27
- This package contains the headers and the static library for libneon27.
- .
- Neon provides lower-level interfaces to directly implement new HTTP
- methods, and higher-level interfaces so that you don't have to
- worry about the lower-level stuff.
-
-Package: libneon27-dbg
-Section: debug
-Priority: extra
-Architecture: any
-Depends: ${misc:Depends}, libneon27 (= ${binary:Version})
-Description: Detached symbols for libneon27
- This package contains the debugging symbols for libneon27, suitable for
- debugging.
- .
- Neon provides lower-level interfaces to directly implement new HTTP
- methods, and higher-level interfaces so that you don't have to
- worry about the lower-level stuff.
-
 Package: libneon27-gnutls
 Section: libs
 Architecture: any
@@ -124,13 +66,3 @@ Description: Detached symbols for libneon27 (GnuTLS enabled)
  Neon provides lower-level interfaces to directly implement new HTTP
  methods, and higher-level interfaces so that you don't have to
  worry about the lower-level stuff.
-
-Package: libneon25-dev
-Section: libdevel
-Architecture: any
-Conflicts: libneon24-doc (<= 0.24.5-1)
-Depends: ${misc:Depends}, libneon27-dev (= ${binary:Version}) | libneon27-gnutls-dev (= ${binary:Version})
-Description: Header and static library files for libneon25
- This is a transitional package to neon27.
- .
- You may safely remove this package.
diff --git a/debian/libneon27-dev.files b/debian/libneon27-dev.files
deleted file mode 100644
index f17be7b..0000000
--- a/debian/libneon27-dev.files
+++ /dev/null
@@ -1,6 +0,0 @@
-usr/bin/neon-config
-usr/include/neon
-usr/lib/libneon.a
-usr/lib/libneon.so
-usr/lib/pkgconfig
-usr/share/man
diff --git a/debian/libneon27-dev.lintian b/debian/libneon27-dev.lintian
deleted file mode 100644
index eddc413..0000000
--- a/debian/libneon27-dev.lintian
+++ /dev/null
@@ -1,3 +0,0 @@
-libneon27-dev: manpage-has-errors-from-man usr/share/man/man3/ne_ssl_cert_identity.3.gz 25: warning [p 1, 2.3i]: can't break line
-libneon27-dev: manpage-has-errors-from-man usr/share/man/man3/ne_ssl_clicert_read.3.gz 31: warning [p 1, 3.7i]: can't break line
-libneon27-dev: manpage-has-errors-from-man usr/share/man/man3/ne_get_error.3.gz 55: warning: `..' not defined
diff --git a/debian/rules b/debian/rules
index e5262b8..f95fe08 100755
--- a/debian/rules
+++ b/debian/rules
@@ -18,15 +18,6 @@ CONFIG_COMMON=  --enable-shared			\
 		--with-libxml2
 CFLAGS="-O2 -g"
 
-${BUILDDIR}/neon-openssl/config.status: configure
-	cp  /usr/share/misc/config.guess \
-	    /usr/share/misc/config.sub \
-	  ./
-	install -d $(BUILDDIR)/neon-openssl
-	cd $(BUILDDIR)/neon-openssl/ && \
-	                CFLAGS=$(CFLAGS) $(CURDIR)/configure ${CONFIG_COMMON} \
-			--with-ssl=openssl
-
 ${BUILDDIR}/neon-gnutls/config.status: configure
 	cp  /usr/share/misc/config.guess \
 	    /usr/share/misc/config.sub \
@@ -37,14 +28,7 @@ ${BUILDDIR}/neon-gnutls/config.status: configure
 			--with-ca-bundle=/etc/ssl/certs/ca-certificates.crt \
 			--with-ssl=gnutls
 
-build: build-openssl build-gnutls
-build-openssl: ${BUILDDIR}/neon-openssl/config.status
-	dh_testdir
-	cd $(BUILDDIR)/neon-openssl/ && $(MAKE)
-#	cd $(BUILDDIR)/neon-openssl/ && $(MAKE) check
-
-	touch build-openssl
-
+build: build-gnutls
 build-gnutls: ${BUILDDIR}/neon-gnutls/config.status
 	dh_testdir
 	cd $(BUILDDIR)/neon-gnutls/ && \
@@ -61,7 +45,7 @@ build-gnutls: ${BUILDDIR}/neon-gnutls/config.status
 clean:
 	dh_testdir
 	dh_testroot
-	-rm -f build-openssl build-gnutls install-openssl install-gnutls \
+	-rm -f build-gnutls install-gnutls \
 	    macros/changelog.m4
 	-rm -f config.sub config.guess
 	rm -rf $(BUILDDIR)
@@ -71,29 +55,7 @@ clean:
 	dh_clean
 
 
-install: install-openssl install-gnutls
-
-install-openssl: build-openssl
-	dh_testdir
-	dh_testroot
-	dh_installdirs
-	cd $(BUILDDIR)/neon-openssl/ && $(MAKE) install-lib install-headers install-config install-man DESTDIR=$(DESTDIR)/$(package)
-	chrpath -d $(CURDIR)/debian/$(package)/usr/lib/libneon.so.27
-	rm -f $(CURDIR)/debian/$(package)/usr/lib/libneon.la
-	dh_movefiles -p$(package)-dev --sourcedir=debian/$(package)
-	install -d debian/$(package)-dev/usr/share/aclocal
-	cp macros/neon*.m4 \
-		debian/$(package)-dev/usr/share/aclocal/
-
-	rm -rf debian/$(package)/usr/include \
-		debian/$(package)/usr/bin \
-		debian/$(package)/usr/share/man \
-		debian/$(package)/usr/lib/pkgconfig
-
-	install -d $(DESTDIR)/$(package)-dev/usr/share/lintian/overrides/
-	install -m0644 $(CURDIR)/debian/$(package)-dev.lintian $(DESTDIR)/$(package)-dev/usr/share/lintian/overrides/$(package)-dev
-
-	touch install-openssl
+install: install-gnutls
 
 install-gnutls: build-gnutls
 	dh_testdir
@@ -131,15 +93,12 @@ binary-arch: build install
 	dh_testroot -a
 
 	cp macros/ChangeLog macros/changelog.m4
-	dh_installdocs -p$(package)-dev macros/changelog.m4
 	dh_installdocs -p$(package)-gnutls-dev macros/changelog.m4
 
 	dh_installchangelogs -a ChangeLog
 	dh_installdocs -a AUTHORS BUGS NEWS README THANKS TODO
-	dh_makeshlibs -p$(package) -V'$(package) (>= $(shlibs-version))'
 	dh_makeshlibs -p$(package)-gnutls -V'$(package)-gnutls (>= $(shlibs-version))'
 	dh_link
-	dh_strip -p$(package) --dbg-package=$(package)-dbg
 	dh_strip -p$(package)-gnutls --dbg-package=$(package)-gnutls-dbg
 	dh_compress -a
 	dh_fixperms -a

Cheers,
Julien

[signature.asc (application/pgp-signature, inline)]

Message #21 received at 622140@bugs.debian.org (full text, mbox, reply):

From: Julien Cristau <jcristau@debian.org>

To: 622140@bugs.debian.org

Subject: neon27: diff for NMU version 0.29.5-3.1

Date: Sun, 3 Jul 2011 12:26:23 +0200

[Message part 1 (text/plain, inline)]

tags 622140 + pending
thanks

Dear maintainer,

I've prepared an NMU for neon27 (versioned as 0.29.5-3.1) and
uploaded it to DELAYED/2.  NMU diff attached.

Cheers,
Julien

[neon27-0.29.5-3.1-nmu.diff (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #28 received at 622140-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.hu>

To: 622140-close@bugs.debian.org

Subject: Bug#622140: fixed in neon27 0.29.6-1

Date: Mon, 04 Jul 2011 23:47:27 +0000

Source: neon27
Source-Version: 0.29.6-1

We believe that the bug you reported is fixed in the latest version of
neon27, which is due to be installed in the Debian FTP archive:

libneon27-dbg_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27-dbg_0.29.6-1_amd64.deb
libneon27-dev_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27-dev_0.29.6-1_amd64.deb
libneon27-gnutls-dbg_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27-gnutls-dbg_0.29.6-1_amd64.deb
libneon27-gnutls-dev_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27-gnutls-dev_0.29.6-1_amd64.deb
libneon27-gnutls_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27-gnutls_0.29.6-1_amd64.deb
libneon27_0.29.6-1_amd64.deb
  to main/n/neon27/libneon27_0.29.6-1_amd64.deb
neon27_0.29.6-1.debian.tar.gz
  to main/n/neon27/neon27_0.29.6-1.debian.tar.gz
neon27_0.29.6-1.dsc
  to main/n/neon27/neon27_0.29.6-1.dsc
neon27_0.29.6.orig.tar.gz
  to main/n/neon27/neon27_0.29.6.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 622140@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.hu> (supplier of updated neon27 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 04 Jul 2011 23:43:29 +0200
Source: neon27
Binary: libneon27 libneon27-dev libneon27-dbg libneon27-gnutls libneon27-gnutls-dev libneon27-gnutls-dbg
Architecture: source amd64
Version: 0.29.6-1
Distribution: unstable
Urgency: low
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
Description: 
 libneon27  - HTTP and WebDAV client library
 libneon27-dbg - Detached symbols for libneon27
 libneon27-dev - Header and static library files for libneon27
 libneon27-gnutls - HTTP and WebDAV client library (GnuTLS enabled)
 libneon27-gnutls-dbg - Detached symbols for libneon27 (GnuTLS enabled)
 libneon27-gnutls-dev - Header and static library files for libneon27 (GnuTLS enabled)
Closes: 622140
Changes: 
 neon27 (0.29.6-1) unstable; urgency=low
 .
   * New upstream release, fixes building with new OpenSSL (closes: #622140).
   * Convert to 3.0 (quilt) source format.
   * Drop old transitional libneon25-dev .
Checksums-Sha1: 
 c2ecc4e177be5bf5e3753ea05f8e921e0822dc86 1277 neon27_0.29.6-1.dsc
 ae1109923303f67ed3421157927bc4bc29c58961 882267 neon27_0.29.6.orig.tar.gz
 56df24ea96999d472404a8f9327d7ac047cfa61c 9684 neon27_0.29.6-1.debian.tar.gz
 01e2616a30766cf379e019593a36babce3827ffa 171696 libneon27_0.29.6-1_amd64.deb
 1a84a710f9d4e13918f4b76275ef32f537ad1cd2 486858 libneon27-dev_0.29.6-1_amd64.deb
 0073d2739294e6a86bce52e29cd5c7b99f666db7 222778 libneon27-dbg_0.29.6-1_amd64.deb
 4d4fc05b3b853e42c3839871db67af389c471360 141870 libneon27-gnutls_0.29.6-1_amd64.deb
 355e50956720117d74fa9e096bc6819602662a4a 450116 libneon27-gnutls-dev_0.29.6-1_amd64.deb
 fc2026c40a415b1c62a712e52754cd1a47caf04a 198364 libneon27-gnutls-dbg_0.29.6-1_amd64.deb
Checksums-Sha256: 
 195e0ca52d292719b85e3b1f4b291bf7390d9ee5e0cbfa39561af05f3333695b 1277 neon27_0.29.6-1.dsc
 9c640b728d6dc80ef1e48f83181166ab6bc95309cece5537e01ffdd01b96eb43 882267 neon27_0.29.6.orig.tar.gz
 32c79db205fe1da98120622abe0648db3fb138025674a036e87a9c51ac2dd42b 9684 neon27_0.29.6-1.debian.tar.gz
 b46043e65ebfbf1678bc77269dda0e692b7ce3ff433aead8454d51dafb573935 171696 libneon27_0.29.6-1_amd64.deb
 eb0fbfdf123ba114fc51e9efe34195472336a62e57c63c5b6698699d0709e463 486858 libneon27-dev_0.29.6-1_amd64.deb
 d815680f16096cab50d8bf8c5b830ae6ece2d34288ffb6ab930a909b57dcbee9 222778 libneon27-dbg_0.29.6-1_amd64.deb
 45f6fa70f529e1b3e0bf21a145c4596fc60d8e21c6706ff923718ea06f694cdf 141870 libneon27-gnutls_0.29.6-1_amd64.deb
 b13f828ac9767aca0bd771efcd7c10f96256a0fc9d2a1824011e89ffdb0ac831 450116 libneon27-gnutls-dev_0.29.6-1_amd64.deb
 be29a5b343272ebc52d890c37c3157d7389f10ebbee5845d8f9d084b8540387b 198364 libneon27-gnutls-dbg_0.29.6-1_amd64.deb
Files: 
 b21c018374d3575edb417d9f64627c83 1277 net optional neon27_0.29.6-1.dsc
 591e0c82e6979e7e615211b386b8f6bc 882267 net optional neon27_0.29.6.orig.tar.gz
 f4bcd1a75f81a000db6af7e287f25a72 9684 net optional neon27_0.29.6-1.debian.tar.gz
 0544efaaff604090e6b28b0138eb1e53 171696 libs optional libneon27_0.29.6-1_amd64.deb
 b66ca5e69c5c401712aa261a66dc5137 486858 libdevel optional libneon27-dev_0.29.6-1_amd64.deb
 6f079331399bbf30a2051f8fd748f785 222778 debug extra libneon27-dbg_0.29.6-1_amd64.deb
 163405648a2e8981091cd8718eed78b5 141870 libs optional libneon27-gnutls_0.29.6-1_amd64.deb
 28091b8a1f76d8501119d8419f041db2 450116 libdevel optional libneon27-gnutls-dev_0.29.6-1_amd64.deb
 98ca202ab38db5042fbea49e1370ec3f 198364 debug extra libneon27-gnutls-dbg_0.29.6-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk4STJUACgkQMDatjqUaT91CGwCdGhHfX+bYc87ZxIuZcAeLb8Y9
nY4AoIBfyjZWKBBDwbPkrw5p8QyfIURo
=NmJA
-----END PGP SIGNATURE-----

Message #33 received at 622140@bugs.debian.org (full text, mbox, reply):

From: Kevin Locke <kevin@kevinlocke.name>

To: Debian Bug Tracking System <622140@bugs.debian.org>

Subject: Re: symbol SSLv2_server_method used

Date: Sun, 31 Jul 2011 08:13:08 -0600

Package: libneon27
Version: 0.29.6-1
Followup-For: Bug #622140

Hi,

This bug does not appear to be fixed in version 0.29.6-1.  Using
opensync-plugin-iceowl (which depends on libneon27) results in the
following error message:

osync_module_load: Unable to open module /usr/lib/opensync/plugins/sunbird_sync.so: /usr/lib/libneon.so.27: undefined symbol: SSLv2_server_method

Checking for symbols in the libneon.so.27 binary yields:

$ readelf -s /usr/lib/libneon.so.27 | fgrep SSLv2_
    55: 00000000     0 NOTYPE  GLOBAL DEFAULT  UND SSLv2_server_method

And examining the source, I can find no reference to OPENSSL_NO_SSL2 as
Kurt suggested and no compile-time checks around SSLv2_server_method at
src/ne_openssl.c:572.  Is there something that I am missing?

Thanks,
Kevin

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.0.0-kevinoid1 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libneon27 depends on:
ii  libc6              2.13-10               Embedded GNU C Library: Shared lib
ii  libcomerr2         1.42~WIP-2011-07-02-1 common error description library
ii  libgssapi-krb5-2   1.9.1+dfsg-1          MIT Kerberos runtime libraries - k
ii  libk5crypto3       1.9.1+dfsg-1          MIT Kerberos runtime libraries - C
ii  libkrb5-3          1.9.1+dfsg-1          MIT Kerberos runtime libraries
ii  libssl1.0.0        1.0.0d-3              SSL shared libraries
ii  libxml2            2.7.8.dfsg-3          GNOME XML library
ii  zlib1g             1:1.2.3.4.dfsg-3      compression library - runtime

libneon27 recommends no packages.

libneon27 suggests no packages.

-- no debconf information

Message #46 received at 622140@bugs.debian.org (full text, mbox, reply):

From: Philipp Kern <pkern@debian.org>

To: Kevin Locke <kevin@kevinlocke.name>, 622140@bugs.debian.org

Cc: Julien Cristau <jcristau@debian.org>, Kurt Roeckx <kurt@roeckx.be>, control@bugs.debian.org

Subject: Re: Bug#622140: symbol SSLv2_server_method used

Date: Sun, 1 Apr 2012 17:22:21 +0200

[Message part 1 (text/plain, inline)]

reopen 622140
notfixed 622140 0.29.6-1
found 622140 0.29.6-1
thanks

On Sun, Jul 31, 2011 at 08:13:08AM -0600, Kevin Locke wrote:
> This bug does not appear to be fixed in version 0.29.6-1.  Using
> opensync-plugin-iceowl (which depends on libneon27) results in the
> following error message:
> 
> osync_module_load: Unable to open module /usr/lib/opensync/plugins/sunbird_sync.so: /usr/lib/libneon.so.27: undefined symbol: SSLv2_server_method
> 
> Checking for symbols in the libneon.so.27 binary yields:
> 
> $ readelf -s /usr/lib/libneon.so.27 | fgrep SSLv2_
>     55: 00000000     0 NOTYPE  GLOBAL DEFAULT  UND SSLv2_server_method
> 
> And examining the source, I can find no reference to OPENSSL_NO_SSL2 as
> Kurt suggested and no compile-time checks around SSLv2_server_method at
> src/ne_openssl.c:572.  Is there something that I am missing?

Indeed, as Kevin said, this was *NOT* fixed.  You cannot link against -lneon
without getting a missing SSLv2_server_method failure. 

Hence reopening at its original severity serious.

It seems that the BTS archived this bug despite version tracking disagreeing
that it's fixed.

Kind regards
Philipp Kern

[signature.asc (application/pgp-signature, inline)]

Message #51 received at 622140-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.hu>

To: 622140-close@bugs.debian.org

Subject: Bug#622140: fixed in neon27 0.29.6-2

Date: Tue, 03 Apr 2012 00:07:09 +0000

Source: neon27
Source-Version: 0.29.6-2

We believe that the bug you reported is fixed in the latest version of
neon27, which is due to be installed in the Debian FTP archive:

libneon27-dbg_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27-dbg_0.29.6-2_amd64.deb
libneon27-dev_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27-dev_0.29.6-2_amd64.deb
libneon27-gnutls-dbg_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27-gnutls-dbg_0.29.6-2_amd64.deb
libneon27-gnutls-dev_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27-gnutls-dev_0.29.6-2_amd64.deb
libneon27-gnutls_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27-gnutls_0.29.6-2_amd64.deb
libneon27_0.29.6-2_amd64.deb
  to main/n/neon27/libneon27_0.29.6-2_amd64.deb
neon27_0.29.6-2.debian.tar.gz
  to main/n/neon27/neon27_0.29.6-2.debian.tar.gz
neon27_0.29.6-2.dsc
  to main/n/neon27/neon27_0.29.6-2.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 622140@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.hu> (supplier of updated neon27 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 03 Apr 2012 00:59:52 +0200
Source: neon27
Binary: libneon27 libneon27-dev libneon27-dbg libneon27-gnutls libneon27-gnutls-dev libneon27-gnutls-dbg
Architecture: source amd64
Version: 0.29.6-2
Distribution: unstable
Urgency: low
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.hu>
Description: 
 libneon27  - HTTP and WebDAV client library
 libneon27-dbg - Detached symbols for libneon27
 libneon27-dev - Header and static library files for libneon27
 libneon27-gnutls - HTTP and WebDAV client library (GnuTLS enabled)
 libneon27-gnutls-dbg - Detached symbols for libneon27 (GnuTLS enabled)
 libneon27-gnutls-dev - Header and static library files for libneon27 (GnuTLS enabled)
Closes: 622140
Changes: 
 neon27 (0.29.6-2) unstable; urgency=low
 .
   * Make Neon recognize that SSLv2 functions were disabled (closes: #622140).
Checksums-Sha1: 
 ad1854848371c99ad5735f58c6231a9b70096f04 1510 neon27_0.29.6-2.dsc
 4fd845e1b1bfed86ddae6260328cac9b8bcd9fd3 10774 neon27_0.29.6-2.debian.tar.gz
 f1ae44cabbf46d3ca4b5488d0722af91facdd145 171832 libneon27_0.29.6-2_amd64.deb
 8f5df6cac21b9a9eee022f17a41df6648656bd6b 487980 libneon27-dev_0.29.6-2_amd64.deb
 4cef85dd704c91c4013fddac5a25b32b6e2cad43 223724 libneon27-dbg_0.29.6-2_amd64.deb
 1e727e4acacee7abce5d3b07ecde2a03041f5379 141620 libneon27-gnutls_0.29.6-2_amd64.deb
 15eb95411676434c3d606c2dd67815348076e81c 446234 libneon27-gnutls-dev_0.29.6-2_amd64.deb
 8ce1458ca2ea1ac91d908424132bd20b1ae45d90 196212 libneon27-gnutls-dbg_0.29.6-2_amd64.deb
Checksums-Sha256: 
 3567ad47d6d8ac33741575991816b753785009786918dceed91843828c1feedd 1510 neon27_0.29.6-2.dsc
 4f667a7eaad64e8cd25b11fe38b5726bb00f4900071d873ae73b59bd5fb01c41 10774 neon27_0.29.6-2.debian.tar.gz
 06a9a3b81ad339092a75ad451dc35800be0871abcf2e6865e5981fa09d91b4c1 171832 libneon27_0.29.6-2_amd64.deb
 1fb118aa19ef955bb47f6c79f1f41b1bac0959d65fbb04a3de7d88a4f72b6230 487980 libneon27-dev_0.29.6-2_amd64.deb
 bcf1f3e2d6bffecd0d3b4adb25ba307d23d3437e70754e96f8045dcdedaa9d17 223724 libneon27-dbg_0.29.6-2_amd64.deb
 d5b389bf7cbb71ea6981aa28f265a09c5e20bd2174ae0ece8675c1de4b3b3c7a 141620 libneon27-gnutls_0.29.6-2_amd64.deb
 80b328ccec5f4a42c41c343e23fe989b0af1f74bc269de4c806f650eeb4dbf90 446234 libneon27-gnutls-dev_0.29.6-2_amd64.deb
 21c877abf2d8a3510c9b47999a63b8afd3af2b208126dcc2227bdadd16bda2b6 196212 libneon27-gnutls-dbg_0.29.6-2_amd64.deb
Files: 
 79fa1612213b5719720a336f664f2368 1510 net optional neon27_0.29.6-2.dsc
 504e10bff28096096569b71d4da7c97f 10774 net optional neon27_0.29.6-2.debian.tar.gz
 899da09562724b3614acfb1c233df267 171832 libs optional libneon27_0.29.6-2_amd64.deb
 75f6fdb981c142d73f42bdae56c7482b 487980 libdevel optional libneon27-dev_0.29.6-2_amd64.deb
 101e711dac337c00c81f3b77c9cefcff 223724 debug extra libneon27-dbg_0.29.6-2_amd64.deb
 c12e77edd0a89adb7ab2e15d89d721c4 141620 libs optional libneon27-gnutls_0.29.6-2_amd64.deb
 0e895d8ffbcb2ee317dbd161d39404ff 446234 libdevel optional libneon27-gnutls-dev_0.29.6-2_amd64.deb
 475619b51e272a0e92a2b52037b27de1 196212 debug extra libneon27-gnutls-dbg_0.29.6-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAk96OSIACgkQMDatjqUaT91TIwCfWRmfvzot4I2ZVMvoTFdgH2Y8
TSsAn0/cB2xXb/FU+ybPxmlFCm4amXB/
=O04h
-----END PGP SIGNATURE-----

Message #56 received at 622140@bugs.debian.org (full text, mbox, reply):

From: Adrian Bunk <bunk@stusta.de>

To: 667043@bugs.debian.org

Cc: 622140@bugs.debian.org, 451778@bugs.debian.org, Julien Cristau <jcristau@debian.org>

Subject: Cause of and possible solution for #667043

Date: Mon, 9 Apr 2012 11:54:48 +0300

This bug #667043 (libneon27-gnutls: Breaks subvertpy: undefined symbol 
ne_ssl_context_get_flag) is caused by disabled_SSLv2_support.patch
that was supposed to fix #622140.

This patch adds a new function to the OpenSSL code that gets called 
unconditionally from generic code.

The fastest fix would be to add a dummy function to the GnuTLS code.

My preferred solution would be:
- Remove disabled_SSLv2_support.patch (fixing #667043).
- Drop the OpenSSL libneon (fixing #451778 and en passant also #622140).
  The OpenSSL variant is no longer used in Debian (libreoffice-core
  currently uses it as a temporary workaround for #667043, but
  that could easily be reverted), and for GPL'ed software it can
  (and has in the past) result in a GPL violation when accidentally 
  linking against the OpenSSL variant.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

Send a report that this bug log contains spam.