Bug#844263: libxml-security-c-dev: depending on libssl1.0-dev breaks open-vm-tools

[Russ Allbery]

wferi at niif.hu (Ferenc Wágner) writes:

> Just adding that Shibboleth itself is also problematic, because
> XMLTooling, which is incompatible with OpenSSL 1.1, uses libcurl, which
> already switched to OpenSSL 1.1.  So switching xml-security-c to OpenSSL
> 1.0 did not actually solve the problem for Shibboleth because of the
> above version clash in XMLTooling.

It's worth noting that Apache also requires OpenSSL 1.0, which may also
affect what the Shibboleth stack can link against.

> Shall I bring it up with the curl maintainers?  Or wait for the
> conclusion on debian-devel?

This seems like something we're going to have to figure out project-wide,
since the way the transition is currently set up doesn't seem likely to
work.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>