[SERVER-86032] mongodb-org-server depends on libssl1.1 for Debian 12 Created: 31/Jan/24  Updated: 05/Feb/24

Status: Needs Verification
Project: Core Server
Component/s: None
Affects Version/s: 7.0.5
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Cory Parr Assignee: Unassigned
Resolution: Unresolved Votes: 0
Labels: debian
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Assigned Teams:
Build
Operating System: ALL
Steps To Reproduce:

Attempt to install MongoDB on Debian 12. You'll get the following errors:

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:The following packages have unmet dependencies:
 mongodb-org-server : Depends: libssl1.1 (>= 1.1.1)
E: Unable to correct problems, you have held broken packages. 

Participants:

 Description   

Debian 12 uses OpenSSL 3.0, not 1.1.1. However, MongoDB is still dependent on the old version of OpenSSL from Debian 11:

mongodb-org-server : Depends: libssl1.1 (>= 1.1.1) 

From the control file inside the package:

Depends: libc6 (>= 2.30), libcurl4 (>= 7.16.2), libgcc-s1 (>= 4.2), liblzma5 (>= 5.1.1alpha+20110809), libssl1.1 (>= 1.1.1), adduser, tzdata

 

You can find the latest supported version of libssl here:
https://packages.debian.org/bookworm/libssl3

 

While Debian 12 is not listed here:
https://www.mongodb.com/docs/upcoming/core/security-transport-encryption/#std-label-transport-encryption

I would still expect the packages to install properly as the following ticket has been closed:
https://jira.mongodb.org/browse/SERVER-77231

and Debian 12 is listed in the Supported Platforms matrix:
https://www.mongodb.com/docs/manual/installation/#supported-platforms

 



 Comments   
Comment by Cory Parr [ 02/Feb/24 ]

This appears to have been a caching problem on our end that had our build system continuing to pull Bullseye packages instead of Bookworm. The packages we manually pulled from the website have the correct dependencies. Apologies for any time wasted.

Generated at Thu Feb 08 06:59:14 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.