[Pkg-openssl-devel] Bug#859826: xca: Please migrate to openssl1.1 in Buster

[Sebastian Andrzej Siewior]

On 2017-04-10 14:23:42 [+0200], Tino Mettler wrote:
> Hi,
Hi,

> I didn't want to state that there are no successors in 1.1. It's just
> that the accessors work differently, and making XCA build with 1.0 and
> 1.1 results in a little #ifdef hell. Another annoyance was that the
> OpenSSL documentation was somewhat behind at least last year, and the
> web server was in some sort of reorganisation, resulting in a lot if
> 404 errors.

The recommended way
	https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes

is to provide the accessors like RSA_set0_key() via ifdef for older
openssl versions (older than 1.1.0) and then use it in the source code
without any ifdefs.

> I'll ask upstream about the current state.

great.

> Regards,
> Tino

Sebastian