Sebastian Andrzej Siewior <sebast...@breakpoint.cc> writes: > this is a remainder about the openssl transition [0]. We really want to > remove libssl1.0-dev from unstable for Buster. I will raise the severity > of this bug to serious in a month. Please react before that happens.
Sorry, we can't do much until new major versions of Apache XML Security (Santuario) and the Shibboleth stack are released with support for OpenSSL 1.1, probably in the first half of 2018. Upstream knows about the issue and has already made significant work on it, but refrained from making more immediate promises, see #859831. -- Regards, Feri