[Pkg-openssl-devel] Bug#855458: libssl1.0-dev: Development environment is incomplete w/o openssl tool

[Bjarni R. Einarsson]

Package: libssl1.0-dev
Version: 1.0.2k-1
Severity: normal

Dear Maintainer,

When trying to build Pound against libssl1.0, the build fails because
Pound uses the openssl tool to generate C code containing DH parameters
(openssl dhparam -C ...).

The system-wide openssl on Debian testing is from OpenSSL 1.1, and
generates C code which is incompatible with OpenSSL 1.0. As a result it
is impossible to build some software (Pound) against OpenSSL 1.0 in
spite of having installed libssl1.0-dev.

The upstream developers have rejected the idea that the openssl dhparam
command should generate code compatible with multiple OpenSSL releases,
(https://github.com/openssl/openssl/issues/2675), so it seems if Debian
wants to provide a fully functional 1.0.x development environment on a
machine primarily using OpenSSL 1.1, the development package will need
to include its own version of the openssl tool (or pull one in via
depencencies).

An alternate fix would be to patch the OpenSSL 1.1 tool to generate
backwards compatible code (against the wishes of the upstream).

I hope this helps!


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libssl1.0-dev depends on:
ii  libssl1.0.2  1.0.2k-1

libssl1.0-dev recommends no packages.

libssl1.0-dev suggests no packages.

-- no debconf information