Opened 7 years ago

Closed 7 years ago

#43926 closed defect (fixed)

gnutls now depends on curl-ca-bundle, upgrade conflicts if certsync installed

Reported by: ned-deily (Ned Deily) Owned by: ryandesign (Ryan Schmidt)
Priority: Normal Milestone:
Component: ports Version: 2.3.0
Keywords: haspatch Cc: Schamschula (Marius Schamschula), dbevans (David B. Evans), cooljeanius (Eric Gallager)
Port: gnutls

Description

r120701 for #42728 added a depends-lib post:curl-ca-bundle to the gnutls port. This causes a conflict if you are using certsync instead of ca-curl-bundle. The gnutls port should be able to use either to satisfy its requirement for a default trust store.

port sync && port outdated && port -u upgrade outdated
--->  Updating the ports tree
The following installed ports are outdated:
[...]
gnutls                         3.3.3_0 < 3.3.4_0
--->  Computing dependencies for curl-ca-bundle
Error: Unable to exec port: Can't install curl-ca-bundle because conflicting ports are active: certsync

Attachments (1)

Portfile-gnutls.diff (696 bytes) - added by Schamschula (Marius Schamschula) 7 years ago.

Download all attachments as: .zip

Change History (7)

comment:1 in reply to:  description ; Changed 7 years ago by Schamschula (Marius Schamschula)

Replying to nad@…:

r120701 for #42728 added a depends-lib post:curl-ca-bundle to the gnutls port. This causes a conflict if you are using certsync instead of ca-curl-bundle. The gnutls port should be able to use either to satisfy its requirement for a default trust store.

port sync && port outdated && port -u upgrade outdated
--->  Updating the ports tree
The following installed ports are outdated:
[...]
gnutls                         3.3.3_0 < 3.3.4_0
--->  Computing dependencies for curl-ca-bundle
Error: Unable to exec port: Can't install curl-ca-bundle because conflicting ports are active: certsync

I just searched the MacPorts available ports database and couldn't find a port called certsync. Can you be more specific?

comment:2 in reply to:  1 ; Changed 7 years ago by neverpanic (Clemens Lang)

Replying to mschamschula@…:

I just searched the MacPorts available ports database and couldn't find a port called certsync. Can you be more specific?

I'm not sure why it doesn't show up on the website, but it is there: browser:trunk/dports/security/certsync/Portfile. The dependency on curl-ca-bundle needs to be rewritten as path:share/curl/curl-ca-bundle.crt:curl-ca-bundle so that certsync can fulfill it.

comment:3 in reply to:  2 ; Changed 7 years ago by Schamschula (Marius Schamschula)

Replying to cal@…:

Replying to mschamschula@…:

I just searched the MacPorts available ports database and couldn't find a port called certsync. Can you be more specific?

I'm not sure why it doesn't show up on the website, but it is there: browser:trunk/dports/security/certsync/Portfile. The dependency on curl-ca-bundle needs to be rewritten as path:share/curl/curl-ca-bundle.crt:curl-ca-bundle so that certsync can fulfill it.

Thanks, for both the link to certsync and the suggestion for the fix. Portfile.diff attached.

Changed 7 years ago by Schamschula (Marius Schamschula)

Attachment: Portfile-gnutls.diff added

comment:4 Changed 7 years ago by cooljeanius (Eric Gallager)

Cc: egall@… added

Cc Me!

comment:5 in reply to:  2 Changed 7 years ago by ryandesign (Ryan Schmidt)

Keywords: haspatch added
Owner: changed from macports-tickets@… to ryandesign@…
Status: newassigned

Replying to cal@…:

Replying to mschamschula@…:

I just searched the MacPorts available ports database and couldn't find a port called certsync. Can you be more specific?

I'm not sure why it doesn't show up on the website, but it is there: browser:trunk/dports/security/certsync/Portfile.

It doesn't show up on the web site because the server that generates the portindex that gets imported to the web site's postgresql database is still running MacPorts 2.1, and the certsync port uses features introduced in later versions of MacPorts. See #40946 for the request to update that server to the current version of MacPorts.

comment:6 in reply to:  3 Changed 7 years ago by ryandesign (Ryan Schmidt)

Resolution: fixed
Status: assignedclosed

Replying to mschamschula@…:

Thanks, for both the link to certsync and the suggestion for the fix. Portfile.diff attached.

Committed in r120769. I was not 100% sure that the curl-ca-bundle.crt file wasn't needed at configure time, since a path to its file is given in the configure.args, so I left it as a library dependency, and I didn't increase the revision, since there's no change for users who already had the port installed.

Note: See TracTickets for help on using tickets.