On Wed, Sep 30, 2020 at 08:09:10PM +0300, Otto Kekäläinen wrote: > Control: forwarded -1 https://jira.mariadb.org/browse/MDEV-21835 > > Note that the upstream MariaDB uses OpenSSL both for building the > server and the client. In Debian OpenSSL is forbidden in the current > state (or so has e.g. Clint Byrum stated), so in Debian we build using > alternatives, which for the server means GnuTLS and for the client > WolfSSL (former YaSSL). > > The long term solution is to wait for OpenSSL 3.0 to be released and > build against it (as it has no license issues). The short term > solution is to hope for upstream to add support for building the > client with the system WolfSSL library.
Hi Otto, FTP masters changed their assessment on treating OpenSSL as a system library, see the FTP meeting log at http://meetbot.debian.net/debian-ftp/2020/debian-ftp.2020-03-13-20.02.html and the followup discussion at https://lists.debian.org/debian-devel/2020/10/msg00165.html As such, you can switch to OpenSSL without needing to wait for OpenSSL 3.0 \o/ Cheers, Moritz