[Pkg-openssl-devel] Bug#859826: xca: Please migrate to openssl1.1 in Buster

[Tino Mettler]

On Mon, Apr 10, 2017 at 13:21:18 +0200, Sebastian Andrzej Siewior wrote:
> On 2017-04-10 12:09:39 [+0200], Tino Mettler wrote:
> > Hi,
> Hi,
> 
> > I already talked to upstream about this last year during the "OpenSSL
> > 1.0 vs. 1.1 in Stretch" discussion. XCA makes use of many data that is
> > not available in 1.1 anymore, making a migration non-trivial.
> 
> please get upstream of xca to talk to openssl's upstream to make them
> aware of the situation and hopefully openssl upstream will add them
> accessors.

Hi,

I didn't want to state that there are no successors in 1.1. It's just
that the accessors work differently, and making XCA build with 1.0 and
1.1 results in a little #ifdef hell. Another annoyance was that the
OpenSSL documentation was somewhat behind at least last year, and the
web server was in some sort of reorganisation, resulting in a lot if
404 errors.

I'll ask upstream about the current state.

Regards,
Tino