OpenSSL 1.0 is no longer supported as free software. As research continues, new bugs are discovered and there are no fixes available.
We should remove it soon. Since Qt 4 depends on it, we can remove them at the same time [0]. Some packages will probably have to be removed, since they depend on OpenSSL 1.0 and have not been updated to use more recent versions. OpenSSL 1.0 is used in the Rust bootstrap, unfortunately, so we will have to preserve some package of it, but it will be hidden. Any thoughts? [0] https://bugs.gnu.org/45704