libxmltooling7 depends on libcurl3, which has been replaced by libcurl4 in Bionic

Status changed to 'Confirmed' because the bug affects multiple users.

Neil Hoggarth <email address hidden> writes:

> I am attempting to make use of libapache2-mod-shib2 on Ubuntu 18.04 LTS.

> Shibboleth installs and works as expected on top of a minimal Ubuntu
> install. However it has a dependency on libcurl3 (via libxmltooling7).

> Almost all of the other libcurl using packages on Ubuntu 18.04 depend on
> libcurl4.

Shibboleth upstream doesn't support OpenSSL 1.1, and libcurl4 is probably
built against OpenSSL 1.1.

There aren't many good solutions to this problem until Shibboleth releases
a version that supports OpenSSL 1.1. I think the Shibboleth packages have
beem removed from Debian testing for the same reason.

--
Russ Allbery (<email address hidden>) <http://www.eyrie.org/~eagle/>

Status changed to 'Confirmed' because the bug affects multiple users.

This bug really messed up our webworker upgrades to 18.04. We are forced to do this rather messy workaround/hack for now: https://depts.washington.edu/bitblog/2018/06/libcurl3-libcurl4-shibboleth-php-curl-ubuntu-18-04/

We have tried to migrate everything to libcurl4 api/abi with openssl1.1 and managed to do that for everything but http://people.canonical.com/~ubuntu-archive/transitions/html/curl4.html xmltooling.... unfortunately we couldn't just kick out xmltooling as that is needed to build a few packages.

Maybe we should have simply kicked out xmltooling and the reverse deps.

OpenSSL 1.1 support should have been in the 3.0 release earlier this month.

https://issues.shibboleth.net/jira/browse/CPPXT-110

@adam-omega Shibboleth 3.0 isn't packaged by Ubuntu or Debian yet and will most certainly never land in 18.04.

Status changed to 'Confirmed' because the bug affects multiple users.

Hi, just seeing if there is a timeline for resolution on this issue? Thanks!

A workaround is documented here - by self compiling the package and adjust LD_PRELOAD for shibd to use the old libcurl shared objects:
https://depts.washington.edu/bitblog/2018/06/libcurl3-libcurl4-shibboleth-php-curl-ubuntu-18-04/

If you want to try (on your own risk) the Disco Dingo version on Bionic where libxmltooling8 is built against libcurl4, then you can do this:

curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xml-security-c/libxml-security-c20_2.0.2-3_amd64.deb' > libxml-security-c20_2.0.2-3_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/l/log4shib/liblog4shib2_2.0.0-2_amd64.deb' > liblog4shib2_2.0.0-2_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xmltooling/libxmltooling8_3.0.4-1_amd64.deb' > libxmltooling8_3.0.4-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp-common_3.0.4+dfsg1-1_all.deb' > shibboleth-sp-common_3.0.4+dfsg1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xmltooling/xmltooling-schemas_3.0.4-1_all.deb' > xmltooling-schemas_3.0.4-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/o/opensaml/opensaml-schemas_3.0.1-1_all.deb' > opensaml-schemas_3.0.1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libshibsp8_3.0.4+dfsg1-1_amd64.deb' > libshibsp8_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5support0_1.17-1_amd64.deb' > libkrb5support0_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5-3_1.17-1_amd64.deb' > libkrb5-3_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libgssapi-krb5-2_1.17-1_amd64.deb' > libgssapi-krb5-2_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/k/krb5/libkrb5-3_1.17-1_amd64.deb' > libkrb5-3_1.17-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/o/opensaml/libsaml10_3.0.1-1_amd64.deb' > libsaml10_3.0.1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libshibsp-plugins_3.0.4+dfsg1-1_amd64.deb' > libshibsp-plugins_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/i/init-system-helpers/init-system-helpers_1.56+nmu1_all.deb' > init-system-helpers_1.56+nmu1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp-utils_3.0.4+dfsg1-1_amd64.deb' > shibboleth-sp-utils_3.0.4+dfsg1-1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/shibboleth-sp2-common_3.0.4+dfsg1-1_all.deb' > shibboleth-sp2-common_3.0.4+dfsg1-1_all.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/x/xerces-c/libxerces-c3.2_3.2.2+debian-1build1_amd64.deb' > libxerces-c3.2_3.2.2+debian-1build1_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/main/i/icu/libicu63_63.1-6_amd64.deb' > libicu63_63.1-6_amd64.deb
curl -L 'http://mirrors.kernel.org/ubuntu/pool/universe/s/shibboleth-sp/libapache2-mod-shib_3.0.4+dfsg1-1_amd64.deb' > libapache2-mod-shib_3.0.4+dfsg1-1_amd64.deb

apt-get install libcurl4 libxalan-c111 libodbc1 libmemcached11 libfcgi0ldbl
dpkg -i libxml-security-c20_2.0.2-3_amd64.deb
dpkg -i liblog4shib2_2.0.0-2_amd64.deb
dpkg -i libxmltooling8_3.0.4-1_amd64.deb
dpkg -i shibboleth-sp-common_3.0.4+dfsg1-1_all.deb
dpkg -i xmltooling-schemas_3.0.4-1_all.deb
dpkg -i opensaml-schemas_3.0.1-1_all.deb
dpkg -i libkrb5-3_1....