]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
Simplify .deb ssl dependency logic
authorNick Porter <nick@portercomputing.co.uk>
Mon, 4 Aug 2025 16:38:32 +0000 (17:38 +0100)
committerNick Porter <nick@portercomputing.co.uk>
Mon, 4 Aug 2025 17:21:09 +0000 (18:21 +0100)
since we require OpenSSL >= 3.0

debian/rules

index 0df73145a597bc1ca1803daf0956bf84df6420b8..a5e6abff9d26f96999f8ad13cd77e28c9ffb3241 100755 (executable)
@@ -53,16 +53,11 @@ else
        confflags += --build $(DEB_BUILD_GNU_TYPE) --host $(DEB_HOST_GNU_TYPE)
 endif
 
-# Add dependency on distribution specific version of openssl that fixes Heartbleed (CVE-2014-0160).
-ifeq ($(shell dpkg-vendor --derives-from Ubuntu && echo yes),yes)
-       SUBSTVARS = -Vdist:Depends="libssl1.0.0 (>= 1.0.1f-1ubuntu2) | libssl1.1 | libssl3"
+# Later Debian versions have the legacy OpenSSL provider in a separate package
+ifeq ($(shell apt-cache show openssl-provider-legacy &>/dev/null && echo yes),yes)
+        SUBSTVARS = -Vdist:Depends="libssl3, openssl-provider-legacy"
 else
-       # Later Debian versions have the legacy OpenSSL provider in a separate package
-       ifeq ($(shell apt-cache show openssl-provider-legacy &>/dev/null && echo yes),yes)
-              SUBSTVARS = -Vdist:Depends="libssl3, openssl-provider-legacy"
-       else
-              SUBSTVARS = -Vdist:Depends="libssl1.0.0 (>= 1.0.1e-2+deb7u5) | libssl1.0.2 | libssl1.1 | libssl3"
-       endif
+        SUBSTVARS = -Vdist:Depends="libssl3"
 endif
 
 # Add libsystemd-dev as a Build-Depends to debian/control if it is known to this system