Debian Bug report logs - #689093
libssl-dev is not Multi-Arch compatible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Francois Gouget <fgouget@free.fr>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libssl-dev is not Multi-Arch compatible

Date: Sat, 29 Sep 2012 03:13:34 +0200

Package: libssl-dev
Version: 1.0.1c-4
Severity: normal

Dear Maintainer,

The amd64 version conflicts with the i386 one which makes it impossible to install both. As a result the /usr/lib/i386-linux-gnu/libssl.so and libcrypto.so symbolic links are missing so that developping 32bit applications (e.g. Wine) using this library is impossible on a 64bit system.

Furthermore this development package does not seem to be multiarch aware as there is no Multi-Arch field.

My understanding is that as long as there are no architecture-dependent headers there is no obstacle (i.e. no toolchain issue) to tagging the development package as 'Multi-Arch: same'. The symbolic link (and any static libraries) should be no issue as they are already in the architecture-qualified folders.

A good model for this appears to be the libx11-dev package.


-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libssl-dev depends on:
ii  libssl1.0.0  1.0.1c-4
ii  zlib1g-dev   1:1.2.7.dfsg-13

Versions of packages libssl-dev recommends:
ii  libssl-doc  1.0.1c-4

libssl-dev suggests no packages.

-- no debconf information

Message #10 received at 689093@bugs.debian.org (full text, mbox, reply):

From: Kurt Roeckx <kurt@roeckx.be>

To: Francois Gouget <fgouget@free.fr>, 689093@bugs.debian.org

Subject: Re: [Pkg-openssl-devel] Bug#689093: libssl-dev is not Multi-Arch compatible

Date: Sat, 29 Sep 2012 11:37:25 +0200

On Sat, Sep 29, 2012 at 03:13:34AM +0200, Francois Gouget wrote:
> 
> My understanding is that as long as there are no architecture-dependent headers there is no obstacle (i.e. no toolchain issue) to tagging the development package as 'Multi-Arch: same'.

The header files are arch specific.  Also see bug #638137


Kurt

Message #15 received at 689093@bugs.debian.org (full text, mbox, reply):

From: Colin Watson <cjwatson@ubuntu.com>

To: Kurt Roeckx <kurt@roeckx.be>, 689093@bugs.debian.org

Cc: Francois Gouget <fgouget@free.fr>

Subject: Re: Bug#689093: libssl-dev is not Multi-Arch compatible

Date: Sat, 15 Dec 2012 12:10:27 +0000

On Sat, Sep 29, 2012 at 11:37:25AM +0200, Kurt Roeckx wrote:
> On Sat, Sep 29, 2012 at 03:13:34AM +0200, Francois Gouget wrote:
> > My understanding is that as long as there are no
> > architecture-dependent headers there is no obstacle (i.e. no
> > toolchain issue) to tagging the development package as 'Multi-Arch:
> > same'.
> 
> The header files are arch specific.  Also see bug #638137

I tried moving all the headers to
/usr/include/$(DEB_HOST_MULTIARCH)/openssl/ and rebuilding everything in
Ubuntu raring that build-depends on libssl-dev.  So far I've had 67
failures out of 428 attempts (there are still a few in progress), mostly
foolish configure scripts that try to manually detect the location of
the OpenSSL headers rather than letting the compiler work it out.  Now,
I think these are generally bugs, but this failure rate seems
inconveniently high to me; that's a lot of tedious fixing of (probably
mostly independent) build system bugs to do.  It would be nice not to
expose quite so many pre-existing bugs.

I'm currently trying the alternative of moving just opensslconf.h.  The
only things that should break with that are configure scripts (or
equivalent) that test for /usr/include/openssl/opensslconf.h directly; I
think this is probably rather rarer than configure scripts that test for
things like /usr/include/openssl/x509.h.

-- 
Colin Watson                                       [cjwatson@ubuntu.com]

Message #20 received at 689093@bugs.debian.org (full text, mbox, reply):

From: Colin Watson <cjwatson@ubuntu.com>

To: Kurt Roeckx <kurt@roeckx.be>, 689093@bugs.debian.org

Cc: Francois Gouget <fgouget@free.fr>

Subject: Re: Bug#689093: libssl-dev is not Multi-Arch compatible

Date: Wed, 19 Dec 2012 13:16:16 +0000

On Sat, Dec 15, 2012 at 12:10:27PM +0000, Colin Watson wrote:
> I tried moving all the headers to
> /usr/include/$(DEB_HOST_MULTIARCH)/openssl/ and rebuilding everything in
> Ubuntu raring that build-depends on libssl-dev.  So far I've had 67
> failures out of 428 attempts (there are still a few in progress), mostly
> foolish configure scripts that try to manually detect the location of
> the OpenSSL headers rather than letting the compiler work it out.  Now,
> I think these are generally bugs, but this failure rate seems
> inconveniently high to me; that's a lot of tedious fixing of (probably
> mostly independent) build system bugs to do.  It would be nice not to
> expose quite so many pre-existing bugs.
> 
> I'm currently trying the alternative of moving just opensslconf.h.  The
> only things that should break with that are configure scripts (or
> equivalent) that test for /usr/include/openssl/opensslconf.h directly; I
> think this is probably rather rarer than configure scripts that test for
> things like /usr/include/openssl/x509.h.

This test (which I ran against current unstable) behaves *much* better.
Out of 413 packages, 402 built cleanly.  Two packages (eucalyptus and
freebsd-utils) were skipped because my test was on i386 and they don't
build there.  chromium-browser failed to unpack for some odd reason,
unrelated to OpenSSL.  Of the remaining eight failures:

  cone: internal compiler error: Segmentation fault
  italc: configure: error: *** Couldn't find any Qt4 libraries (#671489)
  libreoffice: ran out of disk space
  m2crypto: Unable to find 'openssl/opensslconf.h'
  nodejs: timeouts during tests
  obfsproxy: ENOSYS during tests
  opendkim: configure: error: OpenSSL not found
  phantomjs: /usr/bin/ld: cannot find -lQtWebKit

Of these, only two (m2crypto and opendkim) have anything to do with this
change; the rest are pre-existing failures or bugs in my build setup.  I
will file bug reports on those two packages with fixes.  I don't think
we're going to do any better than this, so I recommend the following
patch:

  * Move <openssl/opensslconf.h> to /usr/include/$(DEB_HOST_MULTIARCH), and
    mark libssl-dev Multi-Arch: same.

diff -Nru openssl-1.0.1c/debian/control openssl-1.0.1c/debian/control
--- openssl-1.0.1c/debian/control	2012-07-29 12:33:20.000000000 +0000
+++ openssl-1.0.1c/debian/control	2012-12-15 11:38:58.000000000 +0000
@@ -54,6 +54,7 @@
 Section: libdevel
 Priority: optional
 Architecture: any
+Multi-Arch: same
 Recommends: libssl-doc
 Depends: libssl1.0.0 (= ${binary:Version}), zlib1g-dev, ${misc:Depends}
 Description: SSL development libraries, header files and documentation
diff -Nru openssl-1.0.1c/debian/rules openssl-1.0.1c/debian/rules
--- openssl-1.0.1c/debian/rules	2012-07-17 09:49:15.000000000 +0000
+++ openssl-1.0.1c/debian/rules	2012-12-15 11:38:48.000000000 +0000
@@ -120,6 +120,8 @@
 	cp -pf debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libcrypto.so.* debian/libcrypto1.0.0-udeb/usr/lib/
 	cp -auv lib*.so* debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/
 	for opt in $(OPTS); do set -xe; mkdir -p debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/$$opt; cp -auv $$opt/lib*.so* debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/$$opt/; done
+	mkdir -p debian/tmp/usr/include/$(DEB_HOST_MULTIARCH)/openssl
+	mv debian/tmp/usr/include/openssl/opensslconf.h debian/tmp/usr/include/$(DEB_HOST_MULTIARCH)/openssl/
 	install debian/copyright debian/libssl1.0.0/usr/share/doc/libssl1.0.0/
 	install debian/changelog debian/libssl1.0.0/usr/share/doc/libssl1.0.0/changelog.Debian
 	install debian/copyright debian/libssl-dev/usr/share/doc/libssl-dev/

Thanks,

-- 
Colin Watson                                       [cjwatson@ubuntu.com]

Message #27 received at 689093@bugs.debian.org (full text, mbox, reply):

From: Kurt Roeckx <kurt@roeckx.be>

To: Colin Watson <cjwatson@ubuntu.com>

Cc: 689093@bugs.debian.org, Francois Gouget <fgouget@free.fr>

Subject: Re: Bug#689093: libssl-dev is not Multi-Arch compatible

Date: Thu, 20 Dec 2012 00:37:42 +0100

On Wed, Dec 19, 2012 at 01:16:16PM +0000, Colin Watson wrote:
> 
> This test (which I ran against current unstable) behaves *much* better.
> Out of 413 packages, 402 built cleanly.  Two packages (eucalyptus and
> freebsd-utils) were skipped because my test was on i386 and they don't
> build there.  chromium-browser failed to unpack for some odd reason,
> unrelated to OpenSSL.  Of the remaining eight failures:

Can you also verify that for those 402 that it has at least 1
binary package depending on libssl1?


Kurt

Message #32 received at 689093@bugs.debian.org (full text, mbox, reply):

From: Colin Watson <cjwatson@ubuntu.com>

To: Kurt Roeckx <kurt@roeckx.be>

Cc: 689093@bugs.debian.org, Francois Gouget <fgouget@free.fr>

Subject: Re: Bug#689093: libssl-dev is not Multi-Arch compatible

Date: Thu, 20 Dec 2012 10:50:56 +0000

block 689093 by 696390
thanks

On Thu, Dec 20, 2012 at 12:37:42AM +0100, Kurt Roeckx wrote:
> On Wed, Dec 19, 2012 at 01:16:16PM +0000, Colin Watson wrote:
> > This test (which I ran against current unstable) behaves *much* better.
> > Out of 413 packages, 402 built cleanly.  Two packages (eucalyptus and
> > freebsd-utils) were skipped because my test was on i386 and they don't
> > build there.  chromium-browser failed to unpack for some odd reason,
> > unrelated to OpenSSL.  Of the remaining eight failures:
> 
> Can you also verify that for those 402 that it has at least 1
> binary package depending on libssl1?

Thanks for suggesting this.  Some don't:

  389-ds-base aeskulap apcupsd asio autofs chntpw cmtk dicomscope eagle
  fwbuilder gambas3 gnome-commander gst-plugins-bad1.0 guymager
  handlersocket havp htcheck ifstat inspircd isc-dhcp iscsitarget
  kde4libs kdesvn libapache-mod-log-sql libfprint libgwenhywfar
  libyahoo2 mcabber mysql++ ntp openclonk opensaml2 openswan pam-mysql
  postgis postgresql-8.4 pygresql qpid-cpp qt4-x11 quassel quota racket
  rhash shibboleth-sp2 ssldump subcommander telepathy-rakia valknut
  vdr-plugin-live vidalia vmtk wzdftpd

I ran 'grep-aptavail -XFSource:Package "$x" | grep libssl1' on each of
these.  Most are false positives in that they don't have any libssl
dependencies in unstable either: I guess they're indirect dependencies,
redundant build-dependencies, or build-dependencies for build tools that
don't actually end up in the package.  rhash has a Recommends instead of
a Depends.

Looking through the logs manually as an extra sanity-check, the
following packages don't appear to even try to link against libssl or
libcrypto directly, and none of them observably fail to detect OpenSSL
(some don't seem to try at all; some try but then use something else
such as GnuTLS instead; a few seem to use the headers but rely on
something else for indirect linkage; some obscure their link lines so
it's hard to tell but seems harmless):

  aeskulap apcupsd autofs chntpw cmtk eagle fwbuilder gambas3
  gnome-commander gst-plugins-bad1.0 guymager handlersocket havp htcheck
  ifstat inspircd isc-dhcp iscsitarget kde4libs kdesvn
  libapache-mod-log-sql mcabber mysql++ openclonk opensaml2 openswan
  pam-mysql postgis postgresql-8.4 pygresql quassel quota racket
  shibboleth-sp2 subcommander telepathy-rakia valknut vdr-plugin-live
  vidalia vmtk wzdftpd

The following use -lssl or -lcrypto in link lines but don't end up with
dependencies on libssl1.0.0 (so presumably indirect linkage or unshipped
binaries):

  389-ds-base asio dicomscope libfprint libyahoo2 qpid-cpp

qt4-x11 uses the OpenSSL headers, apparently successfully, but relies on
run-time linking.

libgwenhywfar and ssldump already fail to detect OpenSSL, but those are
due to buggy library tests and have nothing to do with headers.

The one case that's a real problem is ntp, which does indeed misbuild
because it fails to detect OpenSSL headers.  I've filed a bug for this
with a patch (#696390).

-- 
Colin Watson                                       [cjwatson@ubuntu.com]

Message #39 received at 689093-close@bugs.debian.org (full text, mbox, reply):

From: Kurt Roeckx <kurt@roeckx.be>

To: 689093-close@bugs.debian.org

Subject: Bug#689093: fixed in openssl 1.0.1e-3

Date: Wed, 22 May 2013 07:03:09 +0000

Source: openssl
Source-Version: 1.0.1e-3

We believe that the bug you reported is fixed in the latest version of
openssl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 689093@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Kurt Roeckx <kurt@roeckx.be> (supplier of updated openssl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 20 May 2013 16:56:06 +0200
Source: openssl
Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg
Architecture: source all amd64
Version: 1.0.1e-3
Distribution: unstable
Urgency: low
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Kurt Roeckx <kurt@roeckx.be>
Description: 
 libcrypto1.0.0-udeb - crypto shared library - udeb (udeb)
 libssl-dev - SSL development libraries, header files and documentation
 libssl-doc - SSL development documentation documentation
 libssl1.0.0 - SSL shared libraries
 libssl1.0.0-dbg - Symbol tables for libssl and libcrypto
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
Closes: 658162 660971 676533 689093 698406 698447
Changes: 
 openssl (1.0.1e-3) unstable; urgency=low
 .
   * Move <openssl/opensslconf.h> to /usr/include/$(DEB_HOST_MULTIARCH), and
     mark libssl-dev Multi-Arch: same.
     Patch by Colin Watson <cjwatson@ubuntu.com> (Closes: #689093)
   * Add Polish translation (Closes: #658162)
   * Add Turkish translation (Closes: #660971)
   * Enable assembler for the arm targets, and remove armeb.
     Patch by Riku Voipio <riku.voipio@iki.fi> (Closes: #676533)
   * Add support for x32 (Closes: #698406)
   * enable ec_nistp_64_gcc_128 on *-amd64 (Closes: #698447)
Checksums-Sha1: 
 0cdd5e853a2d3080f8f03966d758acc8b354ee25 2200 openssl_1.0.1e-3.dsc
 4194c26c6370ab305b38fa730fda07e2f005768b 94444 openssl_1.0.1e-3.debian.tar.gz
 00199638060866b67cfb21920b450d160a82bf56 1200462 libssl-doc_1.0.1e-3_all.deb
 40a75de42f2d617bf23929f74874c361192a0eb8 696412 openssl_1.0.1e-3_amd64.deb
 e825fbeda27a9e4053af6ae1f4779ccd01f0188b 1242452 libssl1.0.0_1.0.1e-3_amd64.deb
 98458be75200132129cc7a5cb80f283f30e04e82 625330 libcrypto1.0.0-udeb_1.0.1e-3_amd64.udeb
 14798f4836c20008fde00d667c5663d5293ac415 1749248 libssl-dev_1.0.1e-3_amd64.deb
 cf364abda5750d682f88df654d99f54ecf214027 3073402 libssl1.0.0-dbg_1.0.1e-3_amd64.deb
Checksums-Sha256: 
 1d4fd2b5aff62b3e67eec9ef6f0c235954a6436799211d231a4064b0c8dee457 2200 openssl_1.0.1e-3.dsc
 1af8a464a6e07f0208161afeec5ec097a1c47243ffe8ca205c1d9bcbc8addddc 94444 openssl_1.0.1e-3.debian.tar.gz
 f6d492f560bd276c63f473965bf23620bc31edafc6d2336cbf1fafba93637c51 1200462 libssl-doc_1.0.1e-3_all.deb
 3398288887d7162879b830abec3fca90fd15c3c62c59fa56d412cf71343bc41b 696412 openssl_1.0.1e-3_amd64.deb
 7832269362e5d75b0ebfa48a8aa63dadd8a98bc3e200eba895ba34f2b31e222e 1242452 libssl1.0.0_1.0.1e-3_amd64.deb
 7a0864676862dbcd69084fc458cff418c2921fef4470c9cf30a09c4bedc336a0 625330 libcrypto1.0.0-udeb_1.0.1e-3_amd64.udeb
 c302b692720a13a08290b1c5bb6cc94ce61d88966dbdb863463df6c875fe49af 1749248 libssl-dev_1.0.1e-3_amd64.deb
 9b50fccdd23680198045ef068c0e33818b7aea7faac0800ad45b13204b23a11d 3073402 libssl1.0.0-dbg_1.0.1e-3_amd64.deb
Files: 
 b995f84e656da15c7cb6a7fbb2c48d37 2200 utils optional openssl_1.0.1e-3.dsc
 bf38683294e419f12420a57f54cd0211 94444 utils optional openssl_1.0.1e-3.debian.tar.gz
 d143dddd29a792122ed4e16d78d3912b 1200462 doc optional libssl-doc_1.0.1e-3_all.deb
 368e4ce4f5722e1d77fe7a6648733173 696412 utils optional openssl_1.0.1e-3_amd64.deb
 d91ba356484ddbf2fef227a578c19864 1242452 libs important libssl1.0.0_1.0.1e-3_amd64.deb
 2f3d40c71e8859648ed208541be06a8e 625330 debian-installer optional libcrypto1.0.0-udeb_1.0.1e-3_amd64.udeb
 22fcaece815ab3b1b84ace8311259781 1749248 libdevel optional libssl-dev_1.0.1e-3_amd64.deb
 8ad1e3b20627f30fcc07a58a8f7fc5d4 3073402 debug extra libssl1.0.0-dbg_1.0.1e-3_amd64.deb
Package-Type: udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=cjky
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.