Hi Mike,

On 21/7/21 15:20, Mike Tubby wrote:
> Hi All,
>
> I appear to have a problem with OpenSSL and lack of support for weak
> ciphers, i.e. DES and 3DES ...
>
> I am trying to migrate a legacy system from Ubuntu 16.04 to Devuan 3.0
> where we have mobile IoT devices based on Cinterion TC65i that are 10+
> years old with a limited sub-set of SSL 3.0/TLS 1.0 ciphers in its
> Java-ME runtime, in particular we need DES/3DESciphers like
> RSA-3DES-CBC-SHA
>
> I have pulled the source package for openssl-1.1.1d and recompiled
> with configure option --enable-weak-ssl-ciphers that has  left we with
> a new libssl and a mixture of .deb files and .udeb files:
>
> root@webmin1:/home/chris/openssl# ls -l
> total 20364
> -rw-r--r--  1 chris chris 1092008 Jul 21 13:41
> libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb
> -rw-r--r--  1 chris chris 1539476 Jul 21 13:41
> libssl1.1_1.1.1d-0+deb10u6_amd64.deb
> -rw-r--r--  1 chris chris 4024572 Jul 21 13:41
> libssl1.1-dbgsym_1.1.1d-0+deb10u6_amd64.deb
> -rw-r--r--  1 chris chris  191008 Jul 21 13:41
> libssl1.1-udeb_1.1.1d-0+deb10u6_amd64.udeb
> -rw-r--r--  1 chris chris 1794312 Jul 21 13:41
> libssl-dev_1.1.1d-0+deb10u6_amd64.deb
> -rw-r--r--  1 chris chris 1722936 Jul 21 13:41
> libssl-doc_1.1.1d-0+deb10u6_all.deb
> drwxr-xr-x 22 chris chris    4096 Jul 21 13:49 openssl-1.1.1d
> -rw-r--r--  1 chris chris    6574 Jul 21 13:41
> openssl_1.1.1d-0+deb10u6_amd64.buildinfo
> -rw-r--r--  1 chris chris    3724 Jul 21 13:41
> openssl_1.1.1d-0+deb10u6_amd64.changes
> -rw-r--r--  1 chris chris  844036 Jul 21 13:41
> openssl_1.1.1d-0+deb10u6_amd64.deb
> -rw-r--r--  1 root  root    99740 Mar 23 20:54
> openssl_1.1.1d-0+deb10u6.debian.tar.xz
> -rw-r--r--  1 root  root     2472 Mar 23 20:54
> openssl_1.1.1d-0+deb10u6.dsc
> drwxr-xr-x 20 root  root     4096 Jul 21 11:51 openssl-1.1.1d.orig
> -rw-r--r--  1 root  root  8845861 Sep 14  2019 openssl_1.1.1d.orig.tar.gz
> -rw-r--r--  1 root  root      488 Sep 14  2019
> openssl_1.1.1d.orig.tar.gz.asc
> -rw-r--r--  1 chris chris  650980 Jul 21 13:41
> openssl-dbgsym_1.1.1d-0+deb10u6_amd64.deb
> root@webmin1:/home/chris/openssl#
>
> I don't appear to get a new
> libcrypto1.1-udeb_1.1.1d-0+deb10u6_amd64.deb but a udeb file instead
> that will not install.
>
> What am I missing


*libssl1.1* provides both libssl and libcrypto shared libraries.

Cheers,

Aitor.