From jan-oliver.wagner at intevation.de Fri May 2 12:14:30 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Fri, 2 May 2008 12:14:30 +0200 Subject: [Openvas-distro] Debian: libnasl before libraries in NEW ? In-Reply-To: <200804300911.47701.jan-oliver.wagner@intevation.de> References: <200804162311.37081.jan-oliver.wagner@intevation.de> <20080429004153.GC12102@javifsp.no-ip.org> <200804300911.47701.jan-oliver.wagner@intevation.de> Message-ID: <200805021214.34085.jan-oliver.wagner@intevation.de> On Mittwoch, 30. April 2008, Jan-Oliver Wagner wrote: > On Dienstag, 29. April 2008, Javier Fern?ndez-Sanguino Pe?a wrote: > > On Tue, Apr 29, 2008 at 01:30:43AM +0100, Tim Brown wrote: > > > On Monday 28 April 2008 23:20:10 Jan-Oliver Wagner wrote: > > > > I realized that openvas-libraries vanished from the above URL but > > > > a package search does still only find openvas-client. > > > > > > > > Has openvas-libraries been rejected? > > > > > > Well, I haven't seen any REJECT messages for it. But OTOH you're right, it's > > > disappeared. I've explititly CCd jfs in on this in case he has any thought > > > or clue. > > > > No idea, maybe it's still being processed. I have not received a REJECT > > either. > > simply resubmit? > > Or is there a chance to find out who has taken it from the list? > > Lenny is approaching ... ! Still neither on the NEW list nor in unstable .... I think it is important to find out what happened to avoid any further delay. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jfs at computer.org Fri May 2 20:53:03 2008 From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=) Date: Fri, 2 May 2008 20:53:03 +0200 Subject: [Openvas-distro] Debian: libnasl before libraries in NEW ? In-Reply-To: <200805021214.34085.jan-oliver.wagner@intevation.de> References: <200804162311.37081.jan-oliver.wagner@intevation.de> <20080429004153.GC12102@javifsp.no-ip.org> <200804300911.47701.jan-oliver.wagner@intevation.de> <200805021214.34085.jan-oliver.wagner@intevation.de> Message-ID: <20080502185302.GA545@javifsp.no-ip.org> On Fri, May 02, 2008 at 12:14:30PM +0200, Jan-Oliver Wagner wrote: > Still neither on the NEW list nor in unstable .... I think it is important > to find out what happened to avoid any further delay. I've reuploaded the libraries, but the problem seems to be this: jfs at silicio:openvas-libraries-1.0.1$ ldd ./libopenvas/.libs/libopenvas.so linux-gate.so.1 => (0xffffe000) libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7d8c000) /lib/ld-linux.so.2 (0x80000000) jfs at silicio:openvas-libraries-1.0.1$ ldd ./libopenvas_hg/.libs/libopenvas_hg.so linux-gate.so.1 => (0xffffe000) libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7e1a000) /lib/ld-linux.so.2 (0x80000000) Why doesn't the libopenvas libraries link to other stuff? dpkg-shlibdeps have this to say: dpkg-shlibdeps: warning: symbol gnutls_certificate_server_set_request used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol pcap_lookupdev used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_transport_set_lowat used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol pcap_close used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_x509_privkey_import used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_certificate_allocate_credentials used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_strerror used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol pcap_next used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_compression_set_priority used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol gnutls_global_init used by debian/libopenvas1/usr/lib/libopenvas.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: 28 other similar warnings have been skipped (use -v to see them all). dpkg-shlibdeps: warning: symbol __res_send used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol __dn_skipname used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol __putshort used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol __ns_get16 used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol __res_mkquery used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. dpkg-shlibdeps: warning: symbol __dn_expand used by debian/libopenvas1/usr/lib/libopenvas_hg.so.1.0.1 found in none of the libraries. There seems to be an error in how these libraries get compiled, because they are not properly linked and, consequently, the package Dependencies are just not right. Could somebody look into this? Regards Javier -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080502/94a53295/attachment.pgp From jfs at computer.org Fri May 2 21:36:42 2008 From: jfs at computer.org (Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?=) Date: Fri, 2 May 2008 21:36:42 +0200 Subject: [Openvas-distro] Debian: libnasl before libraries in NEW ? In-Reply-To: <20080502185302.GA545@javifsp.no-ip.org> References: <200804162311.37081.jan-oliver.wagner@intevation.de> <20080429004153.GC12102@javifsp.no-ip.org> <200804300911.47701.jan-oliver.wagner@intevation.de> <200805021214.34085.jan-oliver.wagner@intevation.de> <20080502185302.GA545@javifsp.no-ip.org> Message-ID: <20080502193642.GA21607@javifsp.no-ip.org> On Fri, May 02, 2008 at 08:53:02PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: > On Fri, May 02, 2008 at 12:14:30PM +0200, Jan-Oliver Wagner wrote: > > Still neither on the NEW list nor in unstable .... I think it is important > > to find out what happened to avoid any further delay. > > I've reuploaded the libraries, but the problem seems to be this: > > jfs at silicio:openvas-libraries-1.0.1$ ldd ./libopenvas/.libs/libopenvas.so > linux-gate.so.1 => (0xffffe000) > libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7d8c000) > /lib/ld-linux.so.2 (0x80000000) > jfs at silicio:openvas-libraries-1.0.1$ ldd ./libopenvas_hg/.libs/libopenvas_hg.so > linux-gate.so.1 => (0xffffe000) > libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7e1a000) > /lib/ld-linux.so.2 (0x80000000) Ok, fixed the problem. I've commited a patch to SVN to fix the build process, which was broken. With this patch: jfs at silicio:packages$ dpkg --info libopenvas1_1.0.1-5_i386.deb |grep Depend Depends: libc6 (>= 2.7-1), libgnutls26 (>= 2.2.0-0), libpcap0.8 (>= 0.9.3-1) And this looks much much better: jfs at silicio:openvas-libraries-1.0.1$ ldd libopenvas*/.libs/*.so libopenvas_hg/.libs/libopenvas_hg.so: linux-gate.so.1 => (0xffffe000) libutil.so.1 => /lib/i686/cmov/libutil.so.1 (0xb7ef3000) libnsl.so.1 => /lib/i686/cmov/libnsl.so.1 (0xb7edb000) libpcap.so.0.8 => /usr/lib/libpcap.so.0.8 (0xb7eb1000) libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0xb7e38000) libresolv.so.2 => /lib/i686/cmov/libresolv.so.2 (0xb7e25000) libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7cd7000) libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0xb7cc7000) libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0xb7cc2000) libz.so.1 => /usr/lib/libz.so.1 (0xb7cad000) libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb7c45000) /lib/ld-linux.so.2 (0x80000000) libopenvas/.libs/libopenvas.so: linux-gate.so.1 => (0xffffe000) libutil.so.1 => /lib/i686/cmov/libutil.so.1 (0xb7ecd000) libnsl.so.1 => /lib/i686/cmov/libnsl.so.1 (0xb7eb5000) libpcap.so.0.8 => /usr/lib/libpcap.so.0.8 (0xb7e8b000) libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0xb7e12000) libresolv.so.2 => /lib/i686/cmov/libresolv.so.2 (0xb7dff000) libc.so.6 => /lib/i686/cmov/libc.so.6 (0xb7cb1000) libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0xb7ca1000) libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0xb7c9c000) libz.so.1 => /usr/lib/libz.so.1 (0xb7c87000) libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb7c1f000) /lib/ld-linux.so.2 (0x80000000) Since I have uploaded the packages into NEW I will have to reupload them when they get REJECTED again. Just in case I've uploaded to the delayed queue (with a 7-day delay) just so they get in if I forget to reupload. Regards Javier -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: Digital signature Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080502/9db4cc78/attachment.pgp From jan-oliver.wagner at intevation.de Sun May 4 21:19:33 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Sun, 4 May 2008 21:19:33 +0200 Subject: [Openvas-distro] Debian: libnasl before libraries in NEW ? In-Reply-To: <20080502193642.GA21607@javifsp.no-ip.org> References: <200804162311.37081.jan-oliver.wagner@intevation.de> <20080502185302.GA545@javifsp.no-ip.org> <20080502193642.GA21607@javifsp.no-ip.org> Message-ID: <200805042119.47895.jan-oliver.wagner@intevation.de> Javier, On Friday 02 May 2008 21:36, Javier Fern?ndez-Sanguino Pe?a wrote: > Ok, fixed the problem. I've commited a patch to SVN to fix the build > process, which was broken. With this patch: >... thanks a lot for the fix and re-uploading ! Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Tue May 6 12:53:43 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Tue, 6 May 2008 12:53:43 +0200 Subject: [Openvas-distro] Debian: openvas-libraries lost ? Message-ID: <200805061253.47723.jan-oliver.wagner@intevation.de> Hi, I am a bit confused about the status of the openvas-libraries. It is not visible anywhere anymore. AFAIU Javier, it is scheduled for the NEW area. Can I see it somewhere? Who blocks it? Can we identify him/her/it? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jfs at computer.org Tue May 6 16:20:57 2008 From: jfs at computer.org (Javier Fernandez-Sanguino) Date: Tue, 6 May 2008 16:20:57 +0200 Subject: [Openvas-distro] Debian: openvas-libraries lost ? In-Reply-To: <200805061253.47723.jan-oliver.wagner@intevation.de> References: <200805061253.47723.jan-oliver.wagner@intevation.de> Message-ID: 2008/5/6 Jan-Oliver Wagner : > Hi, > > I am a bit confused about the status of the openvas-libraries. > It is not visible anywhere anymore. Well, I reuploaded it and should get into NEW one day of these week. Javier From timb at nth-dimension.org.uk Sun May 11 12:55:24 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Sun, 11 May 2008 03:55:24 -0700 (PDT) Subject: [Openvas-distro] openvas-server packaging Message-ID: All, Whilst working on the openvas-server packaging for Debian I noticed doc/unbsp.c. The only other reference I could find to this was in the MANIFEST file. Is it needed or shall I remove it? Cheers, Tim -- Tim Brown From timb at nth-dimension.org.uk Fri May 23 13:57:34 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Fri, 23 May 2008 12:57:34 +0100 Subject: [Openvas-distro] Fwd: openvas-libnasl_1.0.0-3_i386.changes REJECTED Message-ID: <200805231257.34630.timb@nth-dimension.org.uk> More licensing woes. openvas-libnasl source appears to be licensed as GPLv2 with SSL exclusion. What's the best way to resolve this? AFAIK, the SSL exclusion isn't relevent since we compile against GNU TLS, but I imagine we need to update the license file express the license of the code and explain we don't use OpenSSL? Tim -- Tim Brown -------------- next part -------------- An embedded message was scrubbed... From: Joerg Jaspert Subject: openvas-libnasl_1.0.0-3_i386.changes REJECTED Date: Fri, 23 May 2008 10:48:14 +0000 Size: 1496 Url: http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080523/633fcad3/attachment.mht From timb at nth-dimension.org.uk Fri May 23 17:05:31 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Fri, 23 May 2008 16:05:31 +0100 Subject: [Openvas-distro] openvas-libnasl_1.0.0-3_i386.changes REJECTED In-Reply-To: References: Message-ID: <200805231605.31279.timb@nth-dimension.org.uk> On Friday 23 May 2008 11:48:14 Joerg Jaspert wrote: > Hi Maintainer, > > rejected, your debian/copyright points to the GPL symlink, but you have > files licensed as GPLv2 only, ie. not with the "or any later" option. As > the GPL symlink points to GPLv3 your copyright file is wrong. Please > fix. > > Also, you should mention the SSL exception. Javier, I've discussed this with Joerg and implemented the change I propose to him. Both the new version of this package and the initial version of openvas-server are waiting on mentors for your love and attention. Tim -- Tim Brown From jan-oliver.wagner at intevation.de Tue May 27 09:34:38 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Tue, 27 May 2008 09:34:38 +0200 Subject: [Openvas-distro] Fwd: openvas-libnasl_1.0.0-3_i386.changes REJECTED In-Reply-To: <200805231257.34630.timb@nth-dimension.org.uk> References: <200805231257.34630.timb@nth-dimension.org.uk> Message-ID: <200805270934.41444.jan-oliver.wagner@intevation.de> On Freitag, 23. Mai 2008, Tim Brown wrote: > More licensing woes. openvas-libnasl source appears to be licensed as GPLv2 > with SSL exclusion. What's the best way to resolve this? AFAIK, the SSL > exclusion isn't relevent since we compile against GNU TLS, but I imagine we > need to update the license file express the license of the code and explain > we don't use OpenSSL? funny situation indeed. The actual license is "GPL + OpenSSL exception" and since we are not the copyrright holder we may not change that. So better add a note as you proposed saying that this is inherited from old Nessus times. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner