On Fri, 11 Jan 2019 at 10:52:29 +0100, Harald Dunkel wrote: > I would prefer to support tls 1.3 rather today than tomorrow, > so I wonder if it would be possible to get a backport of > openssl 1.1.1 to Stretch (2b installed in parallel to the > regular openssl 1.1.0)? OpenSSL 1.1.0 and 1.1.1 both build libssl.so.1.1; so, no, they cannot be parallel-installed. If there was a backport of openssl 1.1.1 it would replace 1.1.0. smcv