Ubuntu 22.04 uses libssl3, and thus libssl1.1 is deprecated at this point.

Creating a new package for Ubuntu 22.04 that uses an obsolete libssl version seems like a very bad idea. Also, messing with versions for systemwide libraries like libssl is a similarly a very bad idea, which may have unpredictable consequences in the future.

So one option is that if you will continue to use Ubuntu 22.04, you should convert into using libssl3 for your apps.

Another option is to run legacy apps inside a VM or container, where you could install an older version of Ubuntu (e.g. 20.04) that has libssl1.1 installed.

These two options seem to be the most viable paths to take in your situation.

Answer from Artur Meinild on askubuntu.com
Top answer
1 of 4
16

Ubuntu 22.04 uses libssl3, and thus libssl1.1 is deprecated at this point.

Creating a new package for Ubuntu 22.04 that uses an obsolete libssl version seems like a very bad idea. Also, messing with versions for systemwide libraries like libssl is a similarly a very bad idea, which may have unpredictable consequences in the future.

So one option is that if you will continue to use Ubuntu 22.04, you should convert into using libssl3 for your apps.

Another option is to run legacy apps inside a VM or container, where you could install an older version of Ubuntu (e.g. 20.04) that has libssl1.1 installed.

These two options seem to be the most viable paths to take in your situation.

2 of 4
5

Although I think the advice given by Artur is good. I managed to resolve this for a legacy app (specifically easytether-usb) by grabbing libcrypto.so.1.1 from the 1.1 install as referenced by @Nishant in his answer. I installed that in user space under my home directory and created a sym link to it in /lib/libcrypto.so.1.1:

sudo ln -s ~/openssl/lib/libcrypto.so.1.1 /lib/libcrypto.so.1.1

You can normally add ~/openss/lib to the LD_LIBRARY_PATH for the specific application in question, but in my case the leacy app didn't properly look in $LD_LIBRARY_PATH, so I had to find out where it was looking for libcrypto.so.1.1, I did that with the following:

sudo strace -e trace=open,openat,close,read,write,connect,accept easytether-usb

That showed me a dozen or so attempts to find the file libcrypto.so.1.1 in various locations, which is why I knew to add the sym link to /lib/ above.

After that the legacy app fired up and worked like normal. Other uses cases will likely need other shared libraries. the strace command above should help determine what's needed.

Discussions

raspbian stretch - How do I install the libssl1.0.0 package? - Raspberry Pi Stack Exchange
How can I install libssl1.0.0? ... Package libssl1.0.0 is not available ... ... rpi ~$ apt list libssl* Listing... Done libssl-dev/oldstable 1.1.0k-1~deb9u1 armhf libssl-doc/oldstable 1.1.0k-1~deb9u1 all libssl-ocaml/oldstable 0.5.2-2 armhf libssl-ocaml-dev/oldstable 0.5.2-2 armhf ... More on raspberrypi.stackexchange.com
🌐 raspberrypi.stackexchange.com
Can not install on Ubuntu 22.04 (jammy) due to libssl1.1 dependency
We are getting ready for Ubuntu 22.04 (jammy) that will be released in a few days, but found that the current dotnet packages can currently not be installed. It seems that the problem is due to dotnet linking libssl1.1 whereas Ubuntu jammy now ships only libssl3. More on github.com
🌐 github.com
20
April 8, 2022
Broken php and libssl1.1 installation on Ubuntu 16.04 - Stack Overflow
Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: php7.0-common : Depends: libssl1.1 (>= 1.1.0) but it is ... More on stackoverflow.com
🌐 stackoverflow.com
Need this dependency libssl1.1
You should be able to download the package manually from the previous releases. https://packages.ubuntu.com/impish-updates/libssl1.1 . Click on your architecture and one of the mirrors. Install with sudo dpkg -i libssl1.1_1.1.1l-1ubuntu1.3_amd64.deb for example. It only depends on libc6 >= 2.34 and debconf >= 0.5 which 22.04 satisfies. More on reddit.com
🌐 r/linuxquestions
16
1
May 21, 2022
Top answer
1 of 3
13

Note that libssl1.0.0 is obsolete and no longer updated; any binary linking to it probably suffers from various security issues (perhaps not exploitable, but you’d need to determine that in your scenarios). You should really look for a newer version of whatever it is you’re trying to use.

However, you can find libssl1.0.0 on Debian snapshots; download the appropriate package and install it. For example on amd64:

wget http://snapshot.debian.org/archive/debian/20170705T160707Z/pool/main/o/openssl/libssl1.0.0_1.0.2l-1%7Ebpo8%2B1_amd64.deb
sudo dpkg -i libssl1.0.0*.deb

You may need to install multiarch-support first:

wget http://snapshot.debian.org/archive/debian/20190501T215844Z/pool/main/g/glibc/multiarch-support_2.28-10_amd64.deb
sudo dpkg -i multiarch-support*.deb

(Having this library installed only affects binaries which link to it; it won’t create security issues for other binaries linking to other versions of the library.)

2 of 3
1

I was facing a libssl1.1 issue when trying to install mongo-db in Pop!_OS 22.04 LTS (or Ubuntu 22.04 LTS).

As @stephen-kitt mentioned libssl1.x is an obsolete package. So you need to manually install the required package.

  1. Go to this page
  2. Find the exact version of libssl for example libssl1.1.1
  3. wget http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1-1ubuntu2.1~18.04.20_amd64.deb (use your version url respectively)
  4. Then install with sudo dpkg -i libssl1.1_1.1.1-1ubuntu2.1~18.04.20_amd64.deb

Hope this helps others who are trying to do the same.

The issue is referenced on Github, all credit goes to @feisalramar.

🌐
GitHub
github.com › dotnet › sdk › issues › 24759
Can not install on Ubuntu 22.04 (jammy) due to libssl1.1 dependency · Issue #24759 · dotnet/sdk
April 8, 2022 - We are getting ready for Ubuntu 22.04 (jammy) that will be released in a few days, but found that the current dotnet packages can currently not be installed. It seems that the problem is due to dotnet linking libssl1.1 whereas Ubuntu jammy now ships only libssl3.
Author   dotnet
🌐
GitHub
gist.github.com › joulgs › c8a85bb462f48ffc2044dd878ecaa786
How install libssl1.1 on ubuntu 22.04 · GitHub
in case of another version bumps, check the directory of the file: http://ports.ubuntu.com/pool/main/o/openssl and look for libssl1.1_*_arm64.deb · this really works! need only to check on the dir and download, install then restart.
Top answer
1 of 5
11

The results of rmadison libssl1.0.0 show that the libssl1.0.0 package was dropped from the default Ubuntu repositories after Ubuntu 18.04.

$ rmadison libssl1.0.0
 libssl1.0.0 | 1.0.1-4ubuntu3     | precise          | amd64, armel, armhf, i386, powerpc
 libssl1.0.0 | 1.0.1-4ubuntu5.39  | precise-security | amd64, armel, armhf, i386, powerpc
 libssl1.0.0 | 1.0.1-4ubuntu5.39  | precise-updates  | amd64, armel, armhf, i386, powerpc
 libssl1.0.0 | 1.0.1f-1ubuntu2    | trusty           | amd64, arm64, armhf, i386, powerpc, ppc64el
 libssl1.0.0 | 1.0.1f-1ubuntu2.27 | trusty-security  | amd64, arm64, armhf, i386, powerpc, ppc64el
 libssl1.0.0 | 1.0.1f-1ubuntu2.27 | trusty-updates   | amd64, arm64, armhf, i386, powerpc, ppc64el
 libssl1.0.0 | 1.0.2g-1ubuntu4    | xenial           | amd64, arm64, armhf, i386, powerpc, ppc64el, s390x
 libssl1.0.0 | 1.0.2g-1ubuntu4.15 | xenial-security  | amd64, arm64, armhf, i386, powerpc, ppc64el, s390x
 libssl1.0.0 | 1.0.2g-1ubuntu4.15 | xenial-updates   | amd64, arm64, armhf, i386, powerpc, ppc64el, s390x
 libssl1.0.0 | 1.0.2n-1ubuntu5    | bionic           | amd64, arm64, armhf, i386, ppc64el, s390x
 libssl1.0.0 | 1.0.2n-1ubuntu5.3  | bionic-security  | amd64, arm64, armhf, i386, ppc64el, s390x
 libssl1.0.0 | 1.0.2n-1ubuntu5.3  | bionic-updates   | amd64, arm64, armhf, i386, ppc64el, s390x

The results of apt search libssl show that the libssl package has been upgraded to libssl1.1 in Ubuntu 19.04-20.04. To install it open the terminal and type:

sudo apt install libssl1.1

libssl has been upgraded to libssl3 in Ubuntu 22.04-23.10. libssl has been upgraded to libssl3t64 in Ubuntu 24.04-24.10.

2 of 5
5

If you need libssl1.0.0 on anything after Debian 8 (Jessie), you'll need to update your apt sources before apt installing.

Adding the following lines to my dockerfile worked:

RUN echo "deb http://security.debian.org/debian-security jessie/updates main" >> /etc/apt/sources.list
RUN apt-get update -y && apt-get install -y --no-install-recommends \
    libssl1.0.0
Find elsewhere
🌐
Reddit
reddit.com › r/linuxquestions › need this dependency libssl1.1
r/linuxquestions on Reddit: Need this dependency libssl1.1
May 21, 2022 -

Hello.

I need to install a VPN for my job. This vpn ask, amongst another libraries, libssl1.1.

Tried to install it through apt, bit this library is not in the repo anymore (I have libssl3 already installed, but that one doesn't work)

Im using pop os, recently updated to 22.04.

VPN is Forcepoint 2.5, Linux version, without gui, only cli.

So, I need to install that library in order to use the vpn, how can I do it? Where can I find it? Looking on Internet I only found a guy saying to install an old repo to download it, is it a good idea? Can I delete that repo later easily?

Thanks in advance! I'm a bit new to Linux, still on the basics but learning!

🌐
Reddit
reddit.com › r/linux_gaming › trying to install runescape 3 but says libssl1.1 is not installable?
r/linux_gaming on Reddit: Trying to install RuneScape 3 but says libssl1.1 is not installable?
November 29, 2023 - Try manually sudo apt installing libssl1.1, if that doesn't work, just search up libssl1.1 dpkg, download it and sudo apt install ./downloaded .dpkg file
🌐
Qoitech Forum
forum.qoitech.com › support
Ubuntu 22.04 Installation problem - Support - Qoitech Forum
June 29, 2022 - Hi, I tried to use latest Otii SW on Ubuntu 22.04 Mainly I struggled to do the login procedure…found the forum post regarding fixing libssl to get it working. It gives an error during installation already stating it depends on libssl1.1 I can install libssl3 only. otii : Depends: libssl1.1 (>= 1.1) but it is not installable …
🌐
GitHub
github.com › dotnet › sdk › issues › 25441
mongodb-org-server depends on libssl1.1 (>= 1.1.1); however: Package libssl1.1 is not installed. · Issue #25441 · dotnet/sdk
May 16, 2022 - This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package 'libssl1.1' has no installation candidate ... No fields configured for issues without a type.
Author   dotnet
🌐
Linux Mint Forums
forums.linuxmint.com › board index › main edition support › software & applications
[Solved] Is it possible to install libssl 1.1.0? - Linux Mint Forums
November 22, 2022 - http://archive.ubuntu.com/ubuntu/pool/main/o/openssl/libssl1.1_1.1.1-1ubuntu2.1~18.04.20_amd64.deb If going for the more recent version, I suggest taking the package for Ubuntu20.04/LM20.x is better than taking the package for Ubuntu18.04/LM19.x. https://packages.ubuntu.com/focal-updat ...
🌐
GitHub
github.com › paritytech › parity › issues › 7980
libssl1.1 missing on debian · Issue #7980 · openethereum/parity-ethereum
February 22, 2018 - Done You might want to run 'apt-get -f install' to correct these. The following packages have unmet dependencies: parity : Depends: libssl1.1 (>= 1.1.0) but it is not installable E: Unmet dependencies.
Author   openethereum
🌐
Prince
princexml.com › forum › topic › 4908 › dependency-is-not-satisfiable-libssl1.1-1.1.0
Dependency is not satisfiable: libssl1.1 (>= 1.1.0) - Prince forum
Non-commercial License # apt info openssl Package: openssl Version: 1.1.1n-0+deb11u5 Priority: optional Section: utils Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Installed-Size: 1501 kB Depends: libc6 (>= 2.15), libssl1.1 (>= 1.1.1) Suggests: ca-certificates Homepage: https://www.openssl.org/ Download-Size: 854 kB APT-Manual-Installed: no APT-Sources: http://deb.debian.org/debian-security bullseye-security/main amd64 Packages Description: Secure Sockets Layer toolkit - cryptographic utility