close 970880 0.79.14+git20211010-1 thanks So, as it turns out this bug was caused by certmonger still being built against libcurl4-nss-dev, while the rest of the stack had moved to openssl.. Many thanks to Spencer Olson for figuring it out!
The current stack on unstable seems to be able to pass ipaserver-install, at least without bind9 and dnssec, but I'm sure there are some kinks left to fix. Anyway, I wouldn't consider all of this backportable until it passes the full test suite on Azure, and that's still WIP. timo
