[Pkg-openssl-devel] Bug#918727: Bug#918727: Bug#918727: openssl.cnf incompatible with libssl1.0.2, libssl1.0.0

[Kurt Roeckx]

On Wed, Apr 15, 2020 at 12:19:24PM +0100, Simon McVittie wrote:
> 
> I think setting defaults in the shared library itself would be more
> robust, and if a configuration file to override that is necessary,

This is also the route that Ubuntu took, because it's possible to
install the library without the openssl package. I think we should
do this too.

It causes various issues with the test suite because SHA1 is used
for various tests. But I think that has been fixed in master, or has a
pull request.

I would like to drop SHA1 support in testing/unstable anyway, so I
think we should merge those patches once they've all been merged.


Kurt