On 2017-01-05 23:33:59 [+0100], Christoph Berg wrote: > > why on libssl-dev (<< 1.1.0~)? > > The | libssl-dev (<< 1.1.0~) part is there to enable backporting to > jessie without having to revert libssl1.0-dev back to libssl-dev.
and I though that this is one of the changes you do when you intend to backport a package. But now looking at some other packages I see that more people did this :/ So I need to fix my tracker… > > Otherwise I'm fine with it. I asked the release team & security if they > > object adding openssl's source to sslscan and the release was not too > > happy about it. With latest libssl1.0 upload sslscan won't be able to > > detect 3des ciphers… > > I guess with openssl 1.1 that would also be the case so it doesn't > make a difference. Yes. I did not imply to convert to 1.1 I just tried to point out some of the limitations… > Christoph Sebastian
