Install Shibboleth SP with libcurl4

Wed Jul 18 11:56:36 EDT 2018

On 18/07/18 13:58, Peter Schober wrote:
> Thanks, also for the link to
> https://depts.washington.edu/bitblog/2018/06/libcurl3-libcurl4-shibboleth-php-curl-ubuntu-18-04/
> too bad none bothered to share this with this community here.

Someone from a German university pointed it out to us [SWITCHaai].

Personally, I wouldn't recommend people hack their systems to that
level, it's a recipe for trouble later.

Moreover you'd end up with shibd linked against OpenSSL 1.0 using
libcurl4 linked against OpenSSL 1.1, IIRC that can be an explosive
combination. Ubuntu's changelog for package libxmltooling7 explicitly
mentions linking it to a special libcurl with OpenSSL 1.0:

> xmltooling (1.6.4-1ubuntu2) bionic; urgency=medium
> 
>   * Switch back to openssl1.0 via newly-added libcurl-openssl1.0-dev, since
>     libxml-security is not ported to openssl1.1.
> 
>  -- Steve Langasek <steve.langasek at ubuntu.com>  Tue, 06 Mar 2018 10:04:50 +0100
> 
> xmltooling (1.6.4-1ubuntu1) bionic; urgency=medium
> 
>   * Switch build-depends for OpenSSL 1.1.
> 
>  -- Steve Langasek <steve.langasek at ubuntu.com>  Wed, 28 Feb 2018 14:19:08 -0800

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20180718/63511a60/attachment.sig>