[php-maint] Bug#462607: Bug#462607: php5-curl: missing dependency: ca-certificates and openssl

[Steve Langasek]

reassign 462607 libcurl3
thanks

On Sat, Jan 26, 2008 at 03:28:31AM +0000, lkcl wrote:

> performing a rather minimalist chroot environmented php5 / apache2.2
> install, a rather weird bug occurred - usual stupid lack of php
> debugging hindered that and had to use strace, which showed that
> ca-certificates wasn't being used.

> apt-get install openssl ca-certificates fixed the problem.

> php5-curl was being used.

php5-curl does not need ca-certificates for operation; it works just fine
for http urls without it, which accounts for most available web resources,
and it can also be used with curl_setopt($h,CURLOPT_SSL_VERIFYPEER,FALSE) to
disable certificate checking or with curl_setopt($h,CURLOPT_CAINFO,$certfile)
to specify an alternate certificate path.  I don't see the reason for
php5-curl to depend on a particular collection of certificates here.

Even if this does warrant a dependency, php5-curl is the wrong package to
specify that dependency.  php5-curl is just a set of bindings to libcurl; so
if php5-curl should have ca-certificates installed for normal use, then the
dependency belongs to libcurl3, not to php5-curl.  Indeed, the libcurl3 in
etch did depend on ca-certificates.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org