Hi,

I committed a change to update nettle version numbers, which implies a new symbol version for internal symbols.

That seems to break the gnutls ci build, https://gitlab.com/gnutls/nettle/-/jobs/487360242

The error is

1217 ./bootstrap: getting translations into po/.reference for gnutls... 1218 wget: /lib64/libhogweed.so.5: version `HOGWEED_INTERNAL_5_0' not found (required by /lib64/libgnutls.so.30) 1219 wget: /lib64/libnettle.so.7: version `NETTLE_INTERNAL_7_0' not found (required by /lib64/libgnutls.so.30)

I don't quite understand all details. This job buils and installs nettle, as

./configure --disable-documentation --prefix=/usr --libdir=/usr/lib64 && make -j4 && make install

replacing any previously installed version with the same soname. So that's a somewhat broader test than I had expected. That explains why linking of wget is affected.

The more worring part is that the installed gnutls library seems to depend on internal nettle symbols (it would have been nice if the error message named the offending symbols). Is that intended?

It's not necessarily wrong, but any packaged version of gnutls built that way *must* be marked to depend on exactly the same versions of nettle with which it was built. And the ci rule would need to use a different prefix and some other way to tell the gnutls build to use the newly built nettle library instead of the system version.

On my own debian machine I have libgnutls.so.30, but apparently an older version. According to

objdump -T /usr/lib/x86_64-linux-gnu/libgnutls.so.30

the version I have refers only to symbols with version NETTLE_6 and HOGWEED_4, i.e., nettle version older than 3.5. And no mention of NETTLE_INTERNAL or HOGWEED_INTERNAL.

Regards, /Niels