Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1292583 > unrolled thread

Bug#1135892: libtls-dev: outdated should be 4.2.1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1135892: libtls-dev: outdated should be 4.2.1 Jan Klemkow <j.klemkow@wemelug.de> - 2026-05-07 09:40 +0200
    Bug#1135892: libtls-dev: outdated should be 4.2.1 Marco d'Itri <md@Linux.IT> - 2026-05-07 11:30 +0200
      Bug#1135892: libtls-dev: outdated should be 4.2.1 Jan Klemkow <j.klemkow@wemelug.de> - 2026-05-07 11:40 +0200
        Bug#1135892: libtls-dev: outdated should be 4.2.1 Marco d'Itri <md@linux.it> - 2026-05-07 11:50 +0200
          Bug#1135892: libtls-dev: outdated should be 4.2.1 Jan Klemkow <j.klemkow@wemelug.de> - 2026-05-07 13:20 +0200
            Bug#1135892: libtls-dev: outdated should be 4.2.1 Marco d'Itri <md@linux.it> - 2026-05-07 13:50 +0200
              Bug#1135892: libtls-dev: outdated should be 4.2.1 Jan Klemkow <j.klemkow@wemelug.de> - 2026-05-07 14:10 +0200
    Bug#1135892: libtls-dev: outdated should be 4.2.1 Marco d'Itri <md@linux.it> - 2026-05-07 14:10 +0200
      Bug#1135892: libtls-dev: outdated should be 4.2.1 Jan Klemkow <j.klemkow@wemelug.de> - 2026-05-07 15:40 +0200

#1292583 — Bug#1135892: libtls-dev: outdated should be 4.2.1

Package: libtls-dev
Version: 3.8.1-2.1+b2
Severity: normal
X-Debbugs-Cc: j.klemkow@wemelug.de

Dear Maintainer,

   * What outcome did you expect instead?

An update of libtls-dev to the last stable upstream release 4.2.1 of libtls.

Thanks,
Jan

-- System Information:
Debian Release: 13.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.85+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libtls-dev depends on:
ii  libtls28t64  3.8.1-2.1+b2

libtls-dev recommends no packages.

libtls-dev suggests no packages.

-- no debconf information

[toc] | [next] | [standalone]

#1292601

[Multipart message — attachments visible in raw view] — view raw

On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:

>An update of libtls-dev to the last stable upstream release 4.2.1 of libtls.
Where would this upstream be?

-- 
ciao,
Marco

[toc] | [prev] | [next] | [standalone]

#1292602

On Thu, May 07, 2026 at 11:20:14AM +0200, Marco d'Itri wrote:
> On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
> > An update of libtls-dev to the last stable upstream release 4.2.1 of libtls.
> Where would this upstream be?

The portable version can be found on libressl.org.
Download links are here: https://www.libressl.org/releases.html

Thanks,
Jan

[toc] | [prev] | [next] | [standalone]

#1292603

[Multipart message — attachments visible in raw view] — view raw

On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:

>On Thu, May 07, 2026 at 11:20:14AM +0200, Marco d'Itri wrote:
>> On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
>> > An update of libtls-dev to the last stable upstream release 4.2.1 of libtls.
>> Where would this upstream be?
>The portable version can be found on libressl.org.
>Download links are here: https://www.libressl.org/releases.html
But that is the full libressl, which will not be packaged for Debian.
libretls here is a derivative with a different upstream: 
https://git.causal.agency/libretls/ .

-- 
ciao,
Marco

[toc] | [prev] | [next] | [standalone]

#1292651

On Thu, May 07, 2026 at 11:38:42AM +0200, Marco d'Itri wrote:
> On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
> > On Thu, May 07, 2026 at 11:20:14AM +0200, Marco d'Itri wrote:
> > > On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
> > > > An update of libtls-dev to the last stable upstream release 4.2.1 of libtls.
> > > Where would this upstream be?
> > The portable version can be found on libressl.org.
> > Download links are here: https://www.libressl.org/releases.html
> But that is the full libressl, which will not be packaged for Debian.

Yes, libtls is part of libressl and libtls can also run with openssl.

> libretls here is a derivative with a different upstream:
> https://git.causal.agency/libretls/ .

Ah. I thought this was the source of the libtls-dev packet:
https://salsa.debian.org/md/libretls

The import.sh script imports the libtls parts of the libressl.tar.gz file,
without the rest of libressl.

Bye,
Jan

[toc] | [prev] | [next] | [standalone]

#1292654

[Multipart message — attachments visible in raw view] — view raw

On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:

>> libretls here is a derivative with a different upstream:
>> https://git.causal.agency/libretls/ .
>Ah. I thought this was the source of the libtls-dev packet:
>https://salsa.debian.org/md/libretls
This is the source of the *Debian* package.

You need to take this to the upstream maintainer, who apparently has 
abandoned the project. I will not work on the upstream package myself.

-- 
ciao,
Marco

[toc] | [prev] | [next] | [standalone]

#1292662

On Thu, May 07, 2026 at 01:47:11PM +0200, Marco d'Itri wrote:
> On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
> 
> > > libretls here is a derivative with a different upstream:
> > > https://git.causal.agency/libretls/ .
> > Ah. I thought this was the source of the libtls-dev packet:
> > https://salsa.debian.org/md/libretls
> This is the source of the *Debian* package.
> 
> You need to take this to the upstream maintainer, who apparently has
> abandoned the project. I will not work on the upstream package myself.

Sure.  I created an account on salsa and would try to do the upgrade in
a fork of salsa.debian.org/md/libretls.  I just started this bugreport
cause of hint from another debian maintainer.

Or do you prefer another procedure?

[toc] | [prev] | [next] | [standalone]

#1292661

[Multipart message — attachments visible in raw view] — view raw

On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:

>Sure.  I created an account on salsa and would try to do the upgrade in
>a fork of salsa.debian.org/md/libretls.  I just started this bugreport
>cause of hint from another debian maintainer.
You still do not understand: I am not looking for somebody to help with 
the Debian package, which is as fine as it can be.
You need to talk to the UPSTREAM maintainer to understand if they are 
still interested in maintaining and updating this or not.
If not, the options are:
- we leave everything as it is (you have not explained why you need 
   a newer version of libtls)
- somebody steps up to maintain libtls upstream
- somebody finds a way to keep packaging libtls out of the "main" 
   libretls package

-- 
ciao,
Marco

[toc] | [prev] | [next] | [standalone]

#1292685

On Thu, May 07, 2026 at 02:07:52PM +0200, Marco d'Itri wrote:
> On May 07, Jan Klemkow <j.klemkow@wemelug.de> wrote:
> 
> > Sure.  I created an account on salsa and would try to do the upgrade in
> > a fork of salsa.debian.org/md/libretls.  I just started this bugreport
> > cause of hint from another debian maintainer.
> You still do not understand: I am not looking for somebody to help with the
> Debian package, which is as fine as it can be.
> You need to talk to the UPSTREAM maintainer to understand if they are still
> interested in maintaining and updating this or not.

done.  But, I'm not sure if I'll get an anwser here.

> If not, the options are:
> - we leave everything as it is (you have not explained why you need   a
> newer version of libtls)

The libtls API was extended over the last years.

> - somebody steps up to maintain libtls upstream

I'm willing to do so and to be clear, it was not my attempt to dump this work
on your desk.  I would do this here: https://salsa.debian.org/younix/libretls
if its fine for you?

> - somebody finds a way to keep packaging libtls out of the "main" libretls
> package

As I already said, the import.sh script seems to do this.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web