OpenSSL has licensing issues when linking with GPL applications (without an explicit exception in the GPL-licensed application, which is not uncommon). [1] Deb

OpenSSL has licensing issues when linking with GPL applications (without an explicit exception in the GPL-licensed application, which is not uncommon). [1] Debian in particular does not allow distributing such packages, and the common workaround is to use GnuTLS instead. Unfortunately I can't find any good reference for this policy... Interestingly, it seems like OpenSSL 3.0 is going to be Apache v2 licensed. [2] [1] https://people.gnome.org/~markmc/openssl-and-the-gpl https://people.gnome.org/~markmc/openssl-and-the-gpl [2] https://www.openssl.org/source/license.html https://www.openssl.org/source/license.html