Installing OpenSSL 1.1.1 on Debian Bullseye instead of Default OpenSSL 3.0
Debian Bullseye, the latest stable release of Debian, comes with OpenSSL 3.0 as the default SSL library. However, there might be situations where you need to use OpenSSL 1.1.1 instead. This article will guide you through the process of installing OpenSSL 1.1.1 on Debian Bullseye, overriding the default use of OpenSSL 3.0.
Why Install OpenSSL 1.1.1 on Debian Bullseye?
OpenSSL 3.0 introduces several new features and improvements, but it also has some backward compatibility issues. Some applications may not work correctly with OpenSSL 3.0, and in such cases, you might need to install OpenSSL 1.1.1.
Installing OpenSSL 1.1.1 on Debian Bullseye
Before you begin, it is essential to note that installing OpenSSL 1.1.1 alongside OpenSSL 3.0 could lead to conflicts. Therefore, it is recommended to remove OpenSSL 3.0 before installing OpenSSL 1.1.1.
Removing OpenSSL 3.0
To remove OpenSSL 3.0, run the following commands:
sudo apt-get remove openssl
sudo apt-get autoremove
Adding OpenSSL 1.1.1 Repository
Debian Bullseye does not have OpenSSL 1.1.1 in its official repositories. Therefore, you need to add a third-party repository that provides OpenSSL 1.1.1.
Add the following repository to your /etc/apt/sources.list file:
deb http://archive.ubuntu.com/ubuntu focal main
After adding the repository, update the package list using the following command:
sudo apt-get update
Installing OpenSSL 1.1.1
Now you can install OpenSSL 1.1.1 using the following command:
sudo apt-get install openssl=1.1.1k-1ubuntu2.5
Note: The version number in the command may change based on the latest version available in the repository.
Verifying the Installation
To verify that OpenSSL 1.1.1 is installed correctly, run the following command:
openssl version
The output should be:
OpenSSL 1.1.1k 25 Mar 2021
Summary
In this article, we have covered the process of installing OpenSSL 1.1.1 on Debian Bullseye, overriding the default use of OpenSSL 3.0. We have also discussed the reasons why you might need to install OpenSSL 1.1.1 instead of OpenSSL 3.0.