[Pkg-rust-maintainers] Bug#1131007: xh: Missing dependency: openssl

[Blair Noctis]

Hi Ahmad,

Sorry for the late reply. Was AFK for a while.

On Tue, 17 Mar 2026 00:08:29 +0300 Ahmad Khayyat <akhayyat at gmail.com> wrote:
> Package: xh
> Version: 0.24.1-1
> Severity: normal
> X-Debbugs-Cc: akhayyat at gmail.com
> 
> Dear Maintainer,
> 
> After installing xh using apt on a fresh debian container (debian:13.3-slim), using xh to make an http request (non-HTTPS) resulted in the following error:
> 
> ```
> xh: error: builder error
> 
> Caused by:
>     OpenSSL error
> ```
> 
> Installing the openssl package resolved the issue.
> 
> The apt package should perhaps declare openssl as a dependency.

Thanks for the report. I have prepared a trixie-pu, see #1135095.

The fatal chain is:

1. The reqwest crate used to make HTTP requests initiated a TLS context
unconditionally - even if the URL is plain http://.
2. The openssl crate fails if it could not load certificates.
3. Some other dependency in the stack producing an obscure and confusing
error like OpenSSL does.

FWIW, debian:unstable-slim has a somewhat more useable xh, presumably thanks to
newer dependencies: it fetches plain HTTP URLs just fine, and the error message
is clear when fetching HTTPS URLs without certificates installed.

--
    ,Sdrager
Blair Noctis

🇵🇸