Hi Kurt, Unfortunately it doesn't look like we could switch to OpenSSL 1.1 in the full Shibboleth stack for stretch. For upstream's take on the matter see https://lists.alioth.debian.org/pipermail/pkg-shibboleth-devel/2016-October/004315.html. I hope you can keep 1.0 in some form for now. -- Thanks, Feri
