Commit 9326e4707b for strongswan.org
commit 9326e4707ba3f9c832bc54924e84479e0b141ae5
Author: Tobias Brunner <tobias@strongswan.org>
Date: Mon Jun 29 17:12:45 2026 +0200
github: Remove installation of unnecessary debug symbols for OpenSSL
These are apparently not necessary anymore and since there are often
sync issues (package version mismatch if security fixes are shipped
because there is no *-security suite in the ddebs repo), lets not
install them anymore.
diff --git a/scripts/test.sh b/scripts/test.sh
index ab586a98b0..72ad4c8c2c 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -168,20 +168,6 @@ system_uses_openssl3()
prepare_system_openssl()
{
- # On systems that ship OpenSSL 3 (e.g. Ubuntu 22.04+), we require debug
- # symbols to whitelist leaks
- if test "$1" = "deps"; then
- echo "deb http://ddebs.ubuntu.com $(lsb_release -cs) main restricted
- deb http://ddebs.ubuntu.com $(lsb_release -cs)-updates main restricted
- deb http://ddebs.ubuntu.com $(lsb_release -cs)-proposed main restricted" | \
- sudo tee -a /etc/apt/sources.list.d/ddebs.list
- sudo apt-get install -qq ubuntu-dbgsym-keyring
- if [ "$ID" = "ubuntu" -a "$VERSION_ID" = "24.04" ]; then
- DEPS="$DEPS libssl3t64-dbgsym"
- else
- DEPS="$DEPS libssl3-dbgsym"
- fi
- fi
if test "$LEAK_DETECTIVE" = "yes"; then
# make sure we can properly whitelist functions with leak detective
DEPS="$DEPS binutils-dev"