Migration prevented due to "missing dep libssl-dev (>= 3.1.4)"

[Bryce Harrington]

fetchmail (6.4.37-1 to 6.4.38-1)

    Migration status for fetchmail (6.4.37-1 to 6.4.38-1): BLOCKED: Maybe temporary, maybe blocked but Britney is missing information (check below)
    Issues preventing migration:
    missing build on amd64: fetchmail (from 6.4.37-1)
    missing build on arm64: fetchmail (from 6.4.37-1)
    missing build on armhf: fetchmail (from 6.4.37-1)
    missing build on ppc64el: fetchmail (from 6.4.37-1)
    missing build on riscv64: fetchmail (from 6.4.37-1)
    missing build on s390x: fetchmail (from 6.4.37-1)
    arch:all not built yet, autopkgtest delayed
    Additional info:
    8 days old

The problem here is that openssl 3.1 is in Debian, however openssl 3.0 is preferred in Ubuntu since 3.0 is upstream's long term support release.

This new fetchmail 6.4.38 upstream release includes no substantive code changes or bug fixes, and in addition to the dependency version updates is mainly comprised of just documentation, translation, copyright date, and project metadata changes, which looks to me not crucial for us to include at this time.

So, given the openssl incompatibility I think we can skip this "6.4.38-1" release, and remove it from -proposed. If a new Debian or upstream release comes out prior to 24.04 release we can re-evaluate if it's worth pulling in (and patching the dependency issue if necessary) at that time.

[Matthias Andree (matthias-andree)]

Well, update SSL before release. It doesn't make sense to ship old
garbage for a release if upstream support with patchlevel updates, as
OpenSSL do.

However you should ship the translation updates -- if and only if Ubuntu
maintain libssl properly, it is feasible to (a) change the support
addresses in fetchmail's documentation, (b) add the GPL-mandated notes
that the code was modified, and (c) take responsibility for support, and
then finally (d) relax the version checks in the source code.

This is normal integration work for a distro, nothing special. Just if
you break it, or the underlying SSL library, I will not support it if
you modified it to work on outdated OpenSSL, which is what 6.4.38
strives to prevent.

(Of course you can also keep older versions in and I will send people
with outdated versions away, if Ubuntu prefer that disservice to
maintainers and community.)

[Matthias Andree (matthias-andree)]

Also note, that more importantly, it is not fetchmail itself that requires OpenSSL 3.1.
I have just successfully built - as expected - fetchmail 6.4.38 on FreeBSD 14.0-RELEASE, which uses OpenSSL 3.0.

$ FETCHMAILHOME=/tmp LC_ALL=C ./fetchmail -V | head -n20
This is fetchmail release 6.4.38+POP2+GSS+RPA+NTLM+SDPS+SSL-SSLv2-SSLv3+NLS.
Compiled with SSL library 0x300000c0 "OpenSSL 3.0.12 24 Oct 2023"
Run-time uses SSL library 0x300000c0 "OpenSSL 3.0.12 24 Oct 2023"
OpenSSL: OPENSSLDIR: "/etc/ssl"
Engines: ENGINESDIR: "/usr/lib/engines-3"

Copyright (C) 2002, 2003 Eric S. Raymond
Copyright (C) 2004 Matthias Andree, Eric S. Raymond,
                   Robert M. Funk, Graham Wilson
Copyright (C) 2005 - 2012 Sunil Shetye
Copyright (C) 2005 - 2024 Matthias Andree
Fetchmail comes with ABSOLUTELY NO WARRANTY. This is free software, and you
are welcome to redistribute it under certain conditions. For details,
please see the file COPYING in the source or documentation directory.
This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit. (http://www.openssl.org/)

Fallback MDA: (none)
FreeBSD vmfreebsd14.example.org 14.0-RELEASE-p3 FreeBSD 14.0-RELEASE-p3 #0: Mon Dec 11 04:56:01 UTC 2023 <email address hidden>:/usr/obj/usr/src/amd64.amd64/sys/GENERIC amd64
No mailservers set up -- perhaps /tmp/fetchmailrc is missing?
Taking options from command line

[Danilo Egea Gondolfo (danilogondolfo)]

As we are not going to update OpenSSL on Noble (https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2044795)

I created a merge request dropping the requirements to OpenSSL 3.0. According to the README.SSL file, fetchmail will work just fine.

[Launchpad Janitor (janitor)]

This bug was fixed in the package fetchmail - 6.4.38-1ubuntu1

---------------
fetchmail (6.4.38-1ubuntu1) noble; urgency=medium

  * debian/control: drop OpenSSL requirements to >= 3.0.10 (LP: #2052964)
    According to the README.SSL file it works just fine with 3.0 but will
    warn if it's < 3.0.13.

fetchmail (6.4.38-1) unstable; urgency=medium

  * New upstream release.
  * Use no for Rules-Requires-Root.

 -- Danilo Egea Gondolfo <email address hidden> Mon, 26 Feb 2024 09:45:36 +0000