@mikini, I actually had a similar situation with apt-get wanting to
remove npm. That's due to npm depending on node-gyp, which depends on
nodejs-dev, which depends on libssl-dev. You need to install an old
version of that package as well, you can't have a new libssl-dev package
and an old libssl package installed together.

So something like:

apt-get install libssl1.0.0=1.0.1f-1ubuntu2 libssl-dev=1.0.1f-1ubuntu2
npm node-gyp nodejs-dev

should ensure you'll get compatible older versions installed, and still
have the Node.js stuff.

However, that 1.0.1f-1ubuntu2 version seems quite old and could contain
lots of vulnerabilities... I'd be wary of using it unless your server
won't be doing SSL termination for clients from untrusted sources.
Either because you SSL terminate at a load balancer, a reverse proxy or
the like, or because your server is only accessible from a private
network, like mine.

A better option would be to try and source the libssl and libssl-dev
binaries for the immediately preceding 1.0.1f-1ubuntu2.19 version from
somewhere else.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1626883

Title:
  libssl 1.0.2g-1ubuntu4.4 causes PHP7 SSL cert validation to segfault

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1626883/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to