[Pkg-nginx-maintainers] openssl 1.1

[Christos Trochalakis]

Hello James,

On Sat, Nov 12, 2016 at 03:17:25PM -0500, James Cloos wrote:
>Based on the upload log for experimentail, I installed nginx-full from
>experimental on a sid machine expecting to get 25519 and chacha support.
>
>But ldd shows that nginx 1.11.5-1~exp1 links against 1.0.2 rather than 1.1:
>
> libssl.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libssl.so.1.0.2 (0x00007f2488606000)
> libcrypto.so.1.0.2 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2 (0x00007f24881a2000)
>
>I see that the Depends currently shows:  libssl1.0.2 (>= 1.0.2d).
>
>Why did that change from the earlier experimental packages, which
>advertized 1.1 in their upload email?
>

The package uploaded to experimental includes some fixes regarding
OpenSSL 1.1.0 but it was not built against it since we that was not
possible at that time.

We have uploaded 1.10.2-2 on unstable, which is linked against OpenSSL
1.1.0. The upload is currently blocked in the NEW queue since it
introduces a new binary package, but as soon as it gets approved you can
use the unstable version.