From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Alex Vong Newsgroups: gmane.lisp.guile.user Subject: Re: How to build GNUTLS Guile bindings on Xubuntu Date: Sat, 17 Nov 2018 16:26:38 +0800 Message-ID: <87muq83y9t.fsf@gmail.com> References: <87zhuaiyua.fsf@netris.org> <1c3c23f5-c778-7878-3150-dc1db34be877@gmail.com> <87zhu94djv.fsf@gmail.com> <87va4wzw4x.fsf@netris.org> <87r2fk4nlb.fsf@gmail.com> <87tvkgxzgf.fsf@netris.org> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Trace: blaine.gmane.org 1542443119 29255 195.159.176.226 (17 Nov 2018 08:25:19 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sat, 17 Nov 2018 08:25:19 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) Cc: guile-user@gnu.org, Zelphir Kaltstahl To: Mark H Weaver Original-X-From: guile-user-bounces+guile-user=m.gmane.org@gnu.org Sat Nov 17 09:25:15 2018 Return-path: Envelope-to: guile-user@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gNvuk-0007XH-5h for guile-user@m.gmane.org; Sat, 17 Nov 2018 09:25:14 +0100 Original-Received: from localhost ([::1]:48416 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gNvwn-0000r2-Sf for guile-user@m.gmane.org; Sat, 17 Nov 2018 03:27:21 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53218) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gNvwS-0000qu-Po for guile-user@gnu.org; Sat, 17 Nov 2018 03:27:01 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gNvwP-00056x-MS for guile-user@gnu.org; Sat, 17 Nov 2018 03:27:00 -0500 Original-Received: from mail-pf1-x443.google.com ([2607:f8b0:4864:20::443]:45758) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gNvwP-00052v-GR for guile-user@gnu.org; Sat, 17 Nov 2018 03:26:57 -0500 Original-Received: by mail-pf1-x443.google.com with SMTP id g62so9242537pfd.12 for ; Sat, 17 Nov 2018 00:26:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=xgYyaNZjzMxlMkMqYW/uHXbWzGpFP9GLFsA2UkuypYM=; b=TbFj8H+EOkO7lpdkZdQKTW9+P/dtf31SYXdMManbAl7qGPzrIPdOIXIRyTEvE49rgJ BCGQmQw49xXo25yDDC2nG8IwwKy+1uuoINR9xZRR8fC4BLyJ+vk/bM93frUuipFu0rHT IvGnunRTCjneyLpsi5RUeokopTH7v5TumJYpoIxJe5lIZHjFae8osweHqpvw7jhdURIl KKOt5WFUvDC72zscnLocEJoScTZ9fUFNfyuPyi13/XrTyfOdtiBqGywsz4SeQ0BSm+K6 81LRnsYMhUR7OStTAgNkc8fl0A4MJWNp43nzUfk4PV0mXktPGDcgExmEqMOPc0bOzuTQ jsKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:cc:subject:references:date :in-reply-to:message-id:user-agent:mime-version; bh=xgYyaNZjzMxlMkMqYW/uHXbWzGpFP9GLFsA2UkuypYM=; b=qwRTHjnoX8mExK7FTTGHr4c1awlNYEPEs92YxoFxVZwnFQfffRNhRkx+4MznLcEOwV dTNhkURK31jyaC4StAzLRvgKQ1yd9GgNuI8PwCElPWE9GGWaQS3OQjLHEG82MZcZw2bs hEo+cMic6UPSccfTiQUQXaYjkHxbPJzbIFEepcebnj9AYIN28HwcrrT9DcPjlE/B6Fjp QFaH4/VU0klgQ99jpk6nqR7JKa024W/5jjUnAQQXhSMrkOfP2PL1lT/sMJE7xOCpaXxr ZHhn3zg33YXJ92DCPnG6jEHe/2598Fmya9IiiehFRssacgFKwsoXzbOcUcjRjMurQwx1 brAg== X-Gm-Message-State: AGRZ1gIDNSDW7Nl+lkhJJ7dYJfCfv7yMhqiopNThBc8zeWZdUEfHEkDz w0WThvpBTF71RjldwvQaHyM= X-Google-Smtp-Source: AJdET5cdYpjd5fQB8lxOXMOh5fzoFd0kK/DIhNM0a3XHMTm9ygJyd0ty5/jQZNCwkFoyItgOToLjSw== X-Received: by 2002:a65:57cb:: with SMTP id q11mr12936997pgr.60.1542443216386; Sat, 17 Nov 2018 00:26:56 -0800 (PST) Original-Received: from debian (42-3-197-124.static.netvigator.com. [42.3.197.124]) by smtp.gmail.com with ESMTPSA id x13-v6sm74664040pge.13.2018.11.17.00.26.54 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Sat, 17 Nov 2018 00:26:55 -0800 (PST) In-Reply-To: <87tvkgxzgf.fsf@netris.org> (Mark H. Weaver's message of "Fri, 16 Nov 2018 20:30:13 -0500") X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 2607:f8b0:4864:20::443 X-BeenThere: guile-user@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: General Guile related discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guile-user-bounces+guile-user=m.gmane.org@gnu.org Original-Sender: "guile-user" Xref: news.gmane.org gmane.lisp.guile.user:15004 Archived-At: --=-=-= Content-Type: text/plain Mark H Weaver writes: > Hi Alex, > > Alex Vong writes: > >> Maybe what I wrote is not clear. What I mean is that since Debian build >> of gnutls does not include the guile bindings, we have to build gnutls >> from the source tarball ourselves. >> >> The flag "--with-guile-site-dir=/usr/local/share/guile/site/2.2" >> instructs the build script to install the guile bindings into >> "/usr/local/share/guile/site/2.2". > > Sure. This is reasonable, but for the sake of completeness, I'll point > out two disadvantages with this approach, namely that (1) it entails > effectively overriding Debian's GnuTLS library with your manually built > version, which potentially affects the operation of any Debian package > that links to GnuTLS and (2) it means staying on top of security updates > yourself, i.e. recompiling and installing new versions of GnuTLS or the > bundled copies of libtasn1 and libunistring when security flaws are > discovered in those versions. Ditto for the other packages that you > build and install manually. > Agree, while (1) seems to not causing problems for me in practice, (2) is a very important point to keep in mind. Btw, this bug report[0] explains why the guile bindings were removed. Although it's mark as wontfix, should we encourage the maintainers to re-enable the guile bindings in the experimental repository? The problems could perhaps be solved by building the bindings with guile 2.2. [0]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863147 > Regards, > Mark --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQQwb8uPLAHCXSnTBVZh71Au9gJS8gUCW+/QvgAKCRBh71Au9gJS 8iTKAP4xpKYGsbI/vU3srAwUm93TJripTfiB8zq1fM9StQHZFwD/cPyfr5lpKyyC Br/ymmeoFI90JoeQXsjUwKrFlOs2rg0= =FriL -----END PGP SIGNATURE----- --=-=-=--