On 2020-07-16 08:46:43 [+0200], Kurt Roeckx wrote: > On Thu, Jul 16, 2020 at 03:57:17AM +0100, Dimitri John Ledkov wrote: > > > > openssl package could ship `.include /etc/ssl/providers.d/` in ssl.conf. > > That would actually make sense. > > We could use the include thing to ship a config file for the > fips module with the correct hash in it.
Kurt, what do we do here? Split /usr/lib/*/ossl-modules/legacy.so into its own package which is part of src:openssl and adds a config snippet. > Kurt Sebastian
