• Re: Bug#1094969: git: /usr/lib/git-core/git-remote-http is linked again

    From Timo =?utf-8?Q?R=C3=B6hling?=@21:1/5 to sandals@crustytoothpaste.net on Mon Apr 14 12:00:01 2025
    Hi Brian,

    On Sun, 13 Apr 2025 19:51:38 +0000 "brian m. carlson" <sandals@crustytoothpaste.net> wrote:
    It looks like git upstream -expects- to be linked to OpenSSL. But if
    the position of upstream committers is that this would produce
    something undistributable, that would be very surprising.

    This is totally fine if I'm building against the distro OpenSSL and
    I'm not distributing OpenSSL. For instance, a company I'm familiar
    with shipped Git linked against the distro OpenSSL and distributed
    only Git, but not OpenSSL.
    [...]
    In Debian's case, the component (OpenSSL) accompanies the executable
    (Git) on the mirrors and on install media, so it doesn't apply. In the
    case of that company, they could avail themselves of the distro OpenSSL
    since they were not distributing it, only Git. So for most people
    building Git for local use, this is a fine default.

    Let's assume for the sake of the argument that your interpretation is
    correct.

    Then help me make sense of this. You are not objecting against linking
    with OpenSSL on principle but on a technicality: we are creating the
    very same distro package that literally anyone except us is supposedly
    allowed to link against with Git.

    So why does upstream not grant the OpenSSL linking exception, which is
    one common way to deal with this issue? Surely the discrimination
    against Linux distributions is not the desired outcome but merely an
    artifact?


    Cheers
    Timo

    --
    ⢀⣴⠾⠻⢶⣦⠀ ╭────────────────────────────────────────────────────╮
    ⣾⠁⢠⠒⠀⣿⡁ │ Timo Röhling │
    ⢿⡄⠘⠷⠚⠋⠀ │ 9B03 EBB9 8300 DF97 C2B1 23BF CC8C 6BDD 1403 F4CA │
    ⠈⠳⣄⠀⠀⠀⠀ ╰────────────────────────────────────────────────────╯

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEmwPruYMA35fCsSO/zIxr3RQD9MoFAmf825gACgkQzIxr3RQD 9Mr9ghAAuJhJsA7FVTsJrqvxMG3Pstl/n9UNsL9QF0/P7bc3tvhdapNb0wzcRJU3 BkUHxZPPqnpgpTgp5ZsFey00vEsv900LtQCzpFJ3kTnQZpMvZ//ldgiz3e1su1pI g6I+fUFGeK4yrxjzvFpxW0/lkkZcghLWIWXHEbzkYzoxq3nDSVNljy3CKwz9aFuI j9ppKyF4ofMUnQ3+rMdKQzgi0wBtOuhRRX4dDHxfbe2kaKnqKiFvnBuEmAEsdRVe 0pwG7XZaEwq1zwrzolrf/ARXvhPI28hhwMMybIWewuzQiB1On9wCSYpzD5tzMTju dqWNDU+MZb+W5HWXpOWm/PAHKY6jh6TwtIN8592syfg