On Wed, Dec 26, 2018 at 01:17:26PM +0100, Stefan Bühler wrote:
> Hi,
>
> On 12/26/18 1:01 PM, Moritz Muehlenhoff wrote:
> > Source: lighttpd
> > Severity: normal
> >
> > Your package uses "libssl-dev | libssl1.0-dev" as a build dependency
> > on OpenSSL. openssl1.0 is scheduled for removal, the alternate build
> > dependency can now be removed.
>
> Please keep in mind that some of the alternate build dependencies are
> needed for building on oldstable and stable; we'd like to keep the
> upstream package as close as possible to the debian one, and we are
> building for older dists too.
>
> That said it actually looks like libssl-dev is available for oldstable
> and stable too.
Ack, libssl1.0-dev is a special case for stretch only, libssl-dev
in stretch uses OpenSSL 1.1 and libssl in jessie uses OpenSSL 1.0.1
and given that the current lighttpd is compatible with 1.0.1 and 1.1
the alternate build dep can be safely removed.
Cheers,
Moritz
