Hi, I'm writing to express my opinion that distributing them on the same ISO is probably not a problem as it is "Mere Aggregation"; see <https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.en.html#TOCGPLAndNonfreeOnSameMachine> and <https://www.gnu.org/licenses/old-licenses/gpl-2.0-faq.en.html#MereAggregation>.
However, I concur that linking them is problematic. There might be some merit to consider OpenSSL a system library, but I would err on the side of caution. -- Best regards, Runxi Yu (they/them) https://runxiyu.org YK Pao School
