depend on libcurl4 instead of libcurl4-openssl

[kieran]

Binary package hint: rtorrent

libcurl4-openssl depends on libkrb53 which is definitely not necessary for rtorrent. depend on libcurl4 instead

[Emilio Pozuelo Monfort (pochu)]

Moving to curl source package.

[kieran (daralantarial)]

bug is not in curl. please move back to rtorrent.

rtorrent-$version/debian/control should be changed to build-depend on libcurl4-dev, instead of libcurl4-openssl-dev.

current build-depend on libcurl4-openssl-dev causes rtorrent to be linked against the suite of krb5 libs, which are extraneous.

[Michael Bienia (geser)]

Moving back to rtorrent.

Does rtorrent use SSL or TLS?
libcurl4 doesn't provided SSL or TLS and as far as I'm informed libcurl4 (w/o SSL/TSL) should be removed again.

[kieran (daralantarial)]

i see no usage of TLS or SSL in rtorrent. openssl routines are used for hashing, and protocol encryption.
i have built a version of rtorrent, linking against libcurl4, and it works with no experienced problems.

this is the link-list from rtorrent linked against libcurl4-openssl;
ldd rtorrent
        linux-gate.so.1 => (0xa7ee8000)
        libncurses.so.5 => /lib/libncurses.so.5 (0xa7e9f000)
        libcurl-openssl.so.4 => /usr/lib/libcurl-openssl.so.4 (0xa7e68000)
        libidn.so.11 => /usr/lib/libidn.so.11 (0xa7e38000)
        libdl.so.2 => /lib/i686/cmov/libdl.so.2 (0xa7e34000)
        libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xa7df4000)
        libz.so.1 => /usr/lib/libz.so.1 (0xa7de0000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xa7db7000)
        libtorrent.so.10 => /usr/lib/libtorrent.so.10 (0xa7d23000)
        libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xa7be2000)
        libsigc-2.0.so.0 => /usr/lib/libsigc-2.0.so.0 (0xa7bdc000)
        libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0xa7af3000)
        libm.so.6 => /lib/i686/cmov/libm.so.6 (0xa7acb000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xa7ac0000)
        libc.so.6 => /lib/i686/cmov/libc.so.6 (0xa7978000)
        /lib/ld-linux.so.2 (0xa7ee9000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xa78f1000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xa78cc000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0xa78c9000)
        libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0xa78c0000)
        libkeyutils.so.1 => /lib/libkeyutils.so.1 (0xa78bd000)
        libresolv.so.2 => /lib/i686/cmov/libresolv.so.2 (0xa78aa000)

this is the link list from rtorrent linked against vanilla libcurl4;
ldd /usr/bin/rtorrent
        linux-gate.so.1 => (0xa7f85000)
        libncursesw.so.5 => /lib/libncursesw.so.5 (0xa7f31000)
        libcurl.so.4 => /usr/lib/libcurl.so.4 (0xa7f01000)
        libidn.so.11 => /usr/lib/libidn.so.11 (0xa7ed1000)
        libdl.so.2 => /lib/i686/cmov/libdl.so.2 (0xa7ecd000)
        libz.so.1 => /usr/lib/libz.so.1 (0xa7eb9000)
        libtorrent.so.10 => /usr/lib/libtorrent.so.10 (0xa7e25000)
        libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xa7ce3000)
        libsigc-2.0.so.0 => /usr/lib/libsigc-2.0.so.0 (0xa7cdd000)
        libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0xa7bf4000)
        libm.so.6 => /lib/i686/cmov/libm.so.6 (0xa7bcd000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0xa7bc2000)
        libc.so.6 => /lib/i686/cmov/libc.so.6 (0xa7a7a000)
        /lib/ld-linux.so.2 (0xa7f86000)

[Michael Bienia (geser)]

Debian uploaded[0] a new curl where there transition from libcurl3 to libcurl4 was undone. This also means that there are only libcurl3 (OpenSSL) and libcurl3-gnutls again.

I will ask in #ubuntu-devel what the plan is with curl but I assume Ubuntu will follow the back-transition.

0: http://packages.qa.debian.org/c/curl/news/20070620T223309Z.html

[Michael Bienia (geser)]

I'm setting this bug to "Won't Fix" as gutsy went back to libcurl3 (linked with OpenSSL) and libcurl3-gnutls. As both depend on libkrb53 exchanging libcurl3 with libcurl3-gnutls won't help in reducing the depends.