libxmltooling7 depends on libcurl3, which has been replaced by libcurl4 in Bionic

[Neil Hoggarth]

I am attempting to make use of libapache2-mod-shib2 on Ubuntu 18.04 LTS.

Shibboleth installs and works as expected on top of a minimal Ubuntu install. However it has a dependency on libcurl3 (via libxmltooling7).

Almost all of the other libcurl using packages on Ubuntu 18.04 depend on libcurl4.

libcurl4 is declared to conflict with libcurl3.

Therefore, almost no other libcurl using packages in 18.04 can co-exist with the Shibboleth packages.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Russ Allbery (rra-debian)]

Neil Hoggarth <email address hidden> writes:

> I am attempting to make use of libapache2-mod-shib2 on Ubuntu 18.04 LTS.

> Shibboleth installs and works as expected on top of a minimal Ubuntu
> install. However it has a dependency on libcurl3 (via libxmltooling7).

> Almost all of the other libcurl using packages on Ubuntu 18.04 depend on
> libcurl4.

Shibboleth upstream doesn't support OpenSSL 1.1, and libcurl4 is probably
built against OpenSSL 1.1.

There aren't many good solutions to this problem until Shibboleth releases
a version that supports OpenSSL 1.1. I think the Shibboleth packages have
beem removed from Debian testing for the same reason.

--
Russ Allbery (<email address hidden>) <http://www.eyrie.org/~eagle/>

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Bert Van de Poel (bhack)]

This bug really messed up our webworker upgrades to 18.04. We are forced to do this rather messy workaround/hack for now: https://depts.washington.edu/bitblog/2018/06/libcurl3-libcurl4-shibboleth-php-curl-ubuntu-18-04/

[Dimitri John Ledkov (xnox)]

We have tried to migrate everything to libcurl4 api/abi with openssl1.1 and managed to do that for everything but http://people.canonical.com/~ubuntu-archive/transitions/html/curl4.html xmltooling.... unfortunately we couldn't just kick out xmltooling as that is needed to build a few packages.

Maybe we should have simply kicked out xmltooling and the reverse deps.

[Adam Bishop (adam-omega)]

OpenSSL 1.1 support should have been in the 3.0 release earlier this month.

https://issues.shibboleth.net/jira/browse/CPPXT-110

[Bert Van de Poel (bhack)]

@adam-omega Shibboleth 3.0 isn't packaged by Ubuntu or Debian yet and will most certainly never land in 18.04.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Tom Misilo (tmisilo)]

Hi, just seeing if there is a timeline for resolution on this issue? Thanks!

[spaceone (spaceone)]

A workaround is documented here - by self compiling the package and adjust LD_PRELOAD for shibd to use the old libcurl shared objects:
https://depts.washington.edu/bitblog/2018/06/libcurl3-libcurl4-shibboleth-php-curl-ubuntu-18-04/

[Gerrit Venema (gmoniker)]

If you want to try (on your own risk) the Disco Dingo version on Bionic where libxmltooling8 is built against libcurl4, then you can do this:

curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xml-security-c/libxml-security-c20_2.0.2-3_amd64.deb' > libxml-security-c20_2.0.2-3_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/l/log4shib/liblog4shib2_2.0.0-2_amd64.deb' > liblog4shib2_2.0.0-2_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xmltooling/libxmltooling8_3.0.4-1_amd64.deb' > libxmltooling8_3.0.4-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp-common_3.0.4+dfsg1-1_all.deb' > shibboleth-sp-common_3.0.4+dfsg1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xmltooling/xmltooling-schemas_3.0.4-1_all.deb' > xmltooling-schemas_3.0.4-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/o/opensaml/opensaml-schemas_3.0.1-1_all.deb' > opensaml-schemas_3.0.1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libshibsp8_3.0.4+dfsg1-1_amd64.deb' > libshibsp8_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5support0_1.17-1_amd64.deb' > libkrb5support0_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5-3_1.17-1_amd64.deb' > libkrb5-3_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libgssapi-krb5-2_1.17-1_amd64.deb' > libgssapi-krb5-2_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5-3_1.17-1_amd64.deb' > libkrb5-3_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/o/opensaml/libsaml10_3.0.1-1_amd64.deb' > libsaml10_3.0.1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libshibsp-plugins_3.0.4+dfsg1-1_amd64.deb' > libshibsp-plugins_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/i/init-system-helpers/init-system-helpers_1.56+nmu1_all.deb' > init-system-helpers_1.56+nmu1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp-utils_3.0.4+dfsg1-1_amd64.deb' > shibboleth-sp-utils_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp2-common_3.0.4+dfsg1-1_all.deb' > shibboleth-sp2-common_3.0.4+dfsg1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xerces-c/libxerces-c3.2_3.2.2+debian-1build1_amd64.deb' > libxerces-c3.2_3.2.2+debian-1build1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/i/icu/libicu63_63.1-6_amd64.deb' > libicu63_63.1-6_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libapache2-mod-shib_3.0.4+dfsg1-1_amd64.deb' > libapache2-mod-shib_3.0.4+dfsg1-1_amd64.deb

apt-get install libcurl4 libxalan-c111 libodbc1 libmemcached11 libfcgi0ldbl
dpkg -i libxml-security-c20_2.0.2-3_amd64.deb
dpkg -i liblog4shib2_2.0.0-2_amd64.deb
dpkg -i libxmltooling8_3.0.4-1_amd64.deb
dpkg -i shibboleth-sp-common_3.0.4+dfsg1-1_all.deb
dpkg -i xmltooling-schemas_3.0.4-1_all.deb
dpkg -i opensaml-schemas_3.0.1-1_all.deb
dpkg -i libkrb5-3_1....