On Tue, Nov 15, 2016 at 08:22:10PM +0100, Stefan Fritsch wrote: > Hi again, > > On Saturday, 12 November 2016 07:51:40 CET Stefan Fritsch wrote: > > If these two packages cannot transition to openssl 1.1.0 before apache2 > > does, I suggest that you build with openssl 1.0.2 explicitly and then > > downgrade the bugs and unlink them from the transition bug. I don't have > > much hope that apache2 will transition in time for stretch release. > > since there is now some discussion about this on debian-devel and debian- > release, maybe you should wait a bit with any actions.
If I understand it correctly, the solution for gridsite is something like the patch below for a build dependency on apache2-ssl-dev. I also left an explicit build dependency on libssl1.0-dev as reminder that a Breaks will be required when Apache will change the OpenSSL version used for buster. --- debian/control.old 2016-11-29 16:37:39.000000000 +0000 +++ debian/control 2016-11-29 16:37:59.000000000 +0000 @@ -2,7 +2,7 @@ Section: net Priority: optional Maintainer: Mattias Ellert <mattias.ell...@physics.uu.se> -Build-Depends: debhelper, apache2-dev (>= 2.4), libxml2-dev, libcurl4-openssl-dev, libssl-dev, libcanl-c-dev, gsoap, libtool, libtool-bin, doxygen, sharutils, dh-apache2, pkg-config +Build-Depends: debhelper, apache2-dev (>= 2.4), libxml2-dev, libcurl4-openssl-dev, libssl1.0-dev | libssl-dev (<< 1.1.0~), apache2-ssl-dev, libcanl-c-dev, gsoap, libtool, libtool-bin, doxygen, sharutils, dh-apache2, pkg-config Standards-Version: 3.9.8 Homepage: https://wiki.metacentrum.cz/gswiki/ Vcs-Svn: http://svn.nordugrid.org/repos/packaging/debian/gridsite > Cheers, > Stefan cu Adrian -- "Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed