[From nobody Thu Apr  2 17:07:05 2026
Received: (at submit) by bugs.debian.org; 1 Apr 2026 11:08:17 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-15.2 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
 DKIM_VALID_EF,HAS_PACKAGE,SPF_HELO_NONE,SPF_PASS,WEIRD_PORT
 autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 51; hammy, 100; neutral, 31; spammy,
 0. spammytokens: hammytokens:0.000-+--trixie, 0.000-+--OpenSSL,
 0.000-+--HX-Rspamd-Report:MIME_GOOD, 0.000-+--openssl,
 0.000-+--H*RU:unkown
Return-path: &lt;malte@sequoia-pgp.org&gt;
Received: from mailgate02.uberspace.is
 ([2a00:d0c0:200:0:1c7b:a6ff:fee0:8ea4]:38916)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;malte@sequoia-pgp.org&gt;)
 id 1w7tQm-004LCJ-03 for submit@bugs.debian.org;
 Wed, 01 Apr 2026 11:08:17 +0000
Received: from harrington.uberspace.de (harrington.uberspace.de
 [185.26.156.85])
 by mailgate02.uberspace.is (Postfix) with ESMTPS id 927871821D6
 for &lt;submit@bugs.debian.org&gt;; Wed, 01 Apr 2026 13:08:14 +0200 (CEST)
Received: (qmail 20773 invoked by uid 500); 1 Apr 2026 11:08:14 -0000
Authentication-Results: harrington.uberspace.de;
	auth=pass (plain)
Received: from unknown (HELO unkown) (::1)
 by harrington.uberspace.de (Haraka/3.1.1) with ESMTPSA;
 Wed, 01 Apr 2026 13:08:14 +0200
Message-ID: &lt;be5ba6ce-b737-4a14-84c2-7ec89ae38d54@sequoia-pgp.org&gt;
Date: Wed, 1 Apr 2026 13:08:13 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: submit@bugs.debian.org
From: Malte &lt;malte@sequoia-pgp.org&gt;
Subject: Missing dependency openssl in package sq
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Rspamd-Bar: --
X-Rspamd-Report: BAYES_HAM(-2.607384) XM_UA_NO_VERSION(0.01) MIME_GOOD(-0.1)
X-Rspamd-Score: -2.697384
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
 d=sequoia-pgp.org; s=uberspace; h=from:to:subject:date;
 bh=DZS9R0yF9UjfQEwjp+kvwYJNPmmcC4I0QoOYX3pSy7w=;
 b=kWwMO5jmksFGWivUpLbfUvbNAVY2/3vML8/4aQ71x7dN1A2a9J+kyDl2T6WEcSLSXK9CmJJANm
 fuNiam3bTMeMzXJES2mvmiEc2wMGh691KCe55C1n8RSIqvNDFEX5TX9XPwouvLNn5I1cKkPQ27CA
 sg2pJL8k1NbdtyumI4wvXff1ER//BgrXmJDIAy7jT2PFj3SGm2lNgegqnraj8v9E1t8sZ6ATkBIa
 C0YFZLcIjW57OuUTmYMlTXtSD9FAYNUroFQrZLVeKMM+fxBGu+dRB7LDUXP8vQ6ta1NnkcwRbEQX
 TmtKeEFA8XBtVNviarKwknkdvrR5cZOfACyBab3GX820MIiE2UR0ID7MCq7pX3BNoH8cuLnNSwI6
 bmvjIhTgKypHvQnflsaMpcpxggZUcght/Ln+L41ZTIk7r+zur5i32jx3gRvr4NKafkgO/5lhHwqa
 fdYA9eMxoFj2P4TnqlUrAU61+pI/UQmlGvoVUYhkRbYAZl4OJinY8tSePo/F8TjY2QKl86HNO7Jq
 gnrWrmuDsWke01Yv5rSlCwgHjbBxJZRDpwa5Sv8joP+cOxiLZLgND/rPzZaRWw4Q29vieB/h/exn
 89K/0mPjLvfci35Hp1/18H+o/427pEa41zidhScE8oUSMsiC1iD9R+mGIpK5sdI8oqqIkehklgqX
 g=
X-Greylist: delayed 850 seconds by postgrey-1.37 at buxtehude;
 Wed, 01 Apr 2026 11:08:15 UTC
Delivered-To: submit@bugs.debian.org

Package: sq
Version: 1.3.1-2+b2

The package 'sq' seems to be missing 'openssl' as a dependency.

Reproducer:

---

$ docker run -ti --rm debian:trixie bash -i
# apt update -yqq &amp;&amp; apt install sq
# sq key generate --own-key --without-password --email alice@example.com
# sq network keyserver publish --cert-email alice@example.com --server 
hkp://keys.ubuntu.org

   Error: builder error
because: OpenSSL error
root@fa352589a399:/# apt install openssl
Installing:
   openssl
[...]
# sq network keyserver publish --cert-email alice@example.com --server 
hkp://keys.ubuntu.org
hkp://keys.ubuntu.org: error sending request for url 
(http://keys.ubuntu.org:11371/pks/add)

   Error: error sending request for url 
(http://keys.ubuntu.org:11371/pks/add)
because: operation timed out

---

This reproducer uses the docker image of trixie, installs sq, generates 
a key and tries to publish it. This fails because of an OpenSSL error.

Installing openssl and trying again works - well, it produces an 
expected error.

I am unsure how meaningful using the docker image is, but it's missing 
openssl and thus able to show the problem.

I hope this helps.

all the best
malte
]