Deb packaging assistance

William Muriithi william.muriithi-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Wed May 4 17:06:58 UTC 2011


Afternoon,

I am trying to create a netatalk package with SSL capabilities and
seem to be missing something.  I would be grateful if someone here can
point out what I may be overlooking.  This is Ubuntu 10.10 and it has
openssl installed

dpkg -l | grep ssl
ii  openssl                              0.9.8o-1ubuntu4.1
                  Secure Socket Layer (SSL) binary and related
cryptographic tools

Below is my packaging rules:

DEB_CONFIGURE_EXTRA_FLAGS := \
        --with-shadow --enable-fhs              \
        --enable-tcp-wrappers                   \
        --enable-timelord --enable-overwrite    \
        --with-pkgconfdir=/etc/netatalk         \
        --with-nls-dir=/usr/share/netatalk/nls \
        --enable-krb4-uam --enable-krbV-uam     \
        --with-cnid-dbd-txn                     \
        --disable-logger --enable-srvloc \
        --with-libgcrypt-dir                    \
        --with-cracklib=/var/cache/cracklib/cracklib_dict       \
        --enable-debian

DEB_BUILD_OPTIONS=ssl debuild


Below is what the packager seem to have done.  Notice it says
"--without-ssl-dir ".  Does this mean no SSL?

 -fstack-protector  -D_FORTIFY_SOURCE=2  -Wformat -Wformat-security "
CXXFLAGS="-g -O2 -g -Wall -O2" CPPFLAGS=""
LDFLAGS="-Wl,-Bsymbolic-functions  -fPIE -pie  -Wl,-z,relro
-Wl,-z,now " /home/administrator/netatalk-2.1.2/./configure
--build=x86_64-linux-gnu  --prefix=/usr
--includedir="\${prefix}/include" --mandir="\${prefix}/share/man"
--infodir="\${prefix}/share/info" --sysconfdir=/etc
--localstatedir=/var --libexecdir="\${prefix}/lib/netatalk"
--disable-maintainer-mode --disable-dependency-tracking
--disable-silent-rules --srcdir=.  --with-shadow --enable-fhs
--enable-tcp-wrappers --enable-timelord --enable-overwrite
--with-pkgconfdir=/etc/netatalk --with-nls-dir=/usr/share/netatalk/nls
--enable-krb4-uam --enable-krbV-uam --with-cnid-dbd-txn
--with-libgcrypt-dir --with-cracklib=/var/cache/cracklib/cracklib_dict
--enable-debian --disable-srvloc --disable-zeroconf --without-ssl-dir

Another package output that can help:

config.status: executing default commands
Using libraries:
    LIBS =  -lcrack -L$(top_srcdir)/libatalk
    CFLAGS = -I$(top_srcdir)/include -D_U_="__attribute__((unused))"
-g -O2 -g -Wall -O2  -fPIE  -fstack-protector  -D_FORTIFY_SOURCE=2
-Wformat -Wformat-security  -I$(top_srcdir)/sys
    LIBGCRYPT:
        LIBS   = -lgcrypt
        CFLAGS =
    PAM:
        LIBS   =  -lpam
        CFLAGS =
    WRAP:
        LIBS   = -lwrap
        CFLAGS =
    BDB:
        LIBS   =  -L/usr/lib64 -ldb-4.8
        CFLAGS =
    GSSAPI:
        LIBS   = -Wl,-Bsymbolic-functions  -fPIE -pie  -Wl,-z,relro
-Wl,-z,now   -lgssapi_krb5 -Wl,-Bsymbolic-functions -lgssapi_krb5
-lkrb5 -lk5crypto -lcom_err
        CFLAGS =
    CUPS:
        LIBS   = -lcups -lgssapi_krb5 -lgnutls -lgcrypt -lz -lm -lcrypt
        CFLAGS =
Configure summary:
    Install style:
         debian
    AFP:
         AFP 3.x calls activated: yes
         Large file support (>2GB) for AFP3: yes
         Extended Attributes: ad | sys
         DDP enabled: yes
    CNID:
         backends:  dbd last tdb
    UAMS:
         DHX2    (PAM SHADOW)
         Kerberos V
         Kerberos IV
         passwd  (PAM SHADOW)
         guest
    Options:
         CUPS support:           yes
         SLP support:            no
         tcp wrapper support:    yes
         quota support:          yes
         admin group support:    yes
         valid shell check:      yes
         cracklib support:       yes
         dropbox kludge:         no
         force volume uid/gid:   no
         Apple 2 boot support:   no
         ACL support:            no


I have searched the whole package logs and I can not see a point where
the packager is looking for SSL.  Does this mean the packager is
ignoring the directive to use SSL?  Is there any other way to
ascertain SSL is in use.  I do not have the luxury of using netatalk
logs, as apparently, it does not have the logging facility.

Any assistance would be highly appreaciated.

William
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list