[SOLVED] Libssl-dev dependance mismatch on Ubuntu 18.04.5

Hi there,

We’ve been using jitsi-meet 1.0.4101-1 on an Ubuntu 18.04 server and while we encountered connection and micrphone/sound enabling problems, I decided to uninstall it all and re-install in order to restart from scratch.
(BTW, as mentioned elsewhere it’s not as easy as written here to uninstall. But it’s not my point today)

While everything seem to go fine during installation, I get this ending error when executing /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh :

The following packages have unmet dependencies:
 libssl-dev : Depends: libssl1.1 (= 1.1.1-1ubuntu2.1~18.04.5) but 1.1.1d-1+ubuntu18.04.1+deb.sury.org+2 is to be installed
E: Unable to correct problems, you have held broken packages.

What am I supposed to do now?
Thanks for your help.

Here’s the whole log of the installation:

# apt-get install jitsi-meet
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  jicofo jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge libevent-2.1-6 lua-bitop lua-event lua-expat lua-filesystem lua-sec lua-socket lua5.1 prosody
Suggested packages:
  lua-dbi-postgresql lua-dbi-sqlite3
The following NEW packages will be installed:
  jicofo jitsi-meet jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge libevent-2.1-6 lua-bitop lua-event lua-expat lua-filesystem lua-sec lua-socket lua5.1 prosody
0 upgraded, 15 newly installed, 0 to remove and 0 not upgraded.
Need to get 69.4 MB of archives.
After this operation, 104 MB of additional disk space will be used.
Do you want to continue? [Y/n] 
Get:1 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-expat amd64 1.3.0-4 [12.8 kB]
Get:2 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-filesystem amd64 1.6.3-1 [9,930 B]
Get:3 http://mirrors.online.net/ubuntu bionic/universe amd64 lua5.1 amd64 5.1.5-8.1build2 [93.2 kB]
Get:4 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-bitop amd64 1.0.2-5 [6,680 B]
Get:5 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-socket amd64 3.0~rc1+git+ac3201d-4 [70.5 kB]
Get:6 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-sec amd64 0.6-4 [29.5 kB]
Get:7 http://mirrors.online.net/ubuntu bionic/universe amd64 prosody amd64 0.10.0-1build1 [244 kB]
Get:8 http://mirrors.online.net/ubuntu bionic/main amd64 libevent-2.1-6 amd64 2.1.8-stable-4build1 [133 kB]
Get:9 http://mirrors.online.net/ubuntu bionic/universe amd64 lua-event amd64 0.4.3-2build1 [12.0 kB]
Get:10 https://download.jitsi.org stable/ jitsi-videobridge 1126-1 [30.4 MB]      
Get:11 https://download.jitsi.org stable/ jicofo 1.0-508-1 [32.8 MB]                                                                                                                                             
Get:12 https://download.jitsi.org stable/ jitsi-meet-web 1.0.3729-1 [5,453 kB]                                                                                                                                    
Get:13 https://download.jitsi.org stable/ jitsi-meet-web-config 1.0.3729-1 [13.1 kB]                                                                                                                              
Get:14 https://download.jitsi.org stable/ jitsi-meet-prosody 1.0.3729-1 [6,058 B]                                                                                                                                 
Get:15 https://download.jitsi.org stable/ jitsi-meet 1.0.4101-1 [2,718 B]                                                                                                                                         
Fetched 69.4 MB in 26s (2,646 kB/s)                                                                                                                                                                               
Preconfiguring packages ...
(Reading database ... 145675 files and directories currently installed.)
Preparing to unpack .../00-jitsi-videobridge_1126-1_amd64.deb ...
Unpacking jitsi-videobridge (1126-1) ...
Preparing to unpack .../01-jicofo_1.0-508-1_amd64.deb ...
Unpacking jicofo (1.0-508-1) ...
Selecting previously unselected package jitsi-meet-web.
Preparing to unpack .../02-jitsi-meet-web_1.0.3729-1_all.deb ...
Unpacking jitsi-meet-web (1.0.3729-1) ...
Selecting previously unselected package jitsi-meet-web-config.
Preparing to unpack .../03-jitsi-meet-web-config_1.0.3729-1_all.deb ...
Unpacking jitsi-meet-web-config (1.0.3729-1) ...
Selecting previously unselected package lua-expat:amd64.
Preparing to unpack .../04-lua-expat_1.3.0-4_amd64.deb ...
Unpacking lua-expat:amd64 (1.3.0-4) ...
Selecting previously unselected package lua-filesystem:amd64.
Preparing to unpack .../05-lua-filesystem_1.6.3-1_amd64.deb ...
Unpacking lua-filesystem:amd64 (1.6.3-1) ...
Selecting previously unselected package lua5.1.
Preparing to unpack .../06-lua5.1_5.1.5-8.1build2_amd64.deb ...
Unpacking lua5.1 (5.1.5-8.1build2) ...
Selecting previously unselected package lua-bitop:amd64.
Preparing to unpack .../07-lua-bitop_1.0.2-5_amd64.deb ...
Unpacking lua-bitop:amd64 (1.0.2-5) ...
Selecting previously unselected package lua-socket:amd64.
Preparing to unpack .../08-lua-socket_3.0~rc1+git+ac3201d-4_amd64.deb ...
Unpacking lua-socket:amd64 (3.0~rc1+git+ac3201d-4) ...
Selecting previously unselected package lua-sec:amd64.
Preparing to unpack .../09-lua-sec_0.6-4_amd64.deb ...
Unpacking lua-sec:amd64 (0.6-4) ...
Selecting previously unselected package prosody.
Preparing to unpack .../10-prosody_0.10.0-1build1_amd64.deb ...
Unpacking prosody (0.10.0-1build1) ...
Selecting previously unselected package jitsi-meet-prosody.
Preparing to unpack .../11-jitsi-meet-prosody_1.0.3729-1_all.deb ...
Unpacking jitsi-meet-prosody (1.0.3729-1) ...
Preparing to unpack .../12-jitsi-meet_1.0.4101-1_all.deb ...
Unpacking jitsi-meet (1.0.4101-1) ...
Selecting previously unselected package libevent-2.1-6:amd64.
Preparing to unpack .../13-libevent-2.1-6_2.1.8-stable-4build1_amd64.deb ...
Unpacking libevent-2.1-6:amd64 (2.1.8-stable-4build1) ...
Selecting previously unselected package lua-event:amd64.
Preparing to unpack .../14-lua-event_0.4.3-2build1_amd64.deb ...
Unpacking lua-event:amd64 (0.4.3-2build1) ...
Setting up lua-socket:amd64 (3.0~rc1+git+ac3201d-4) ...
Setting up jitsi-videobridge (1126-1) ...
* Applying /etc/sysctl.d/10-console-messages.conf ...
kernel.printk = 4 4 1 7
* Applying /etc/sysctl.d/10-ipv6-privacy.conf ...
net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
* Applying /etc/sysctl.d/10-kernel-hardening.conf ...
kernel.kptr_restrict = 1
* Applying /etc/sysctl.d/10-link-restrictions.conf ...
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
* Applying /etc/sysctl.d/10-magic-sysrq.conf ...
kernel.sysrq = 176
* Applying /etc/sysctl.d/10-network-security.conf ...
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.tcp_syncookies = 1
* Applying /etc/sysctl.d/10-ptrace.conf ...
kernel.yama.ptrace_scope = 1
* Applying /etc/sysctl.d/10-zeropage.conf ...
vm.mmap_min_addr = 65536
* Applying /etc/sysctl.d/20-jvb-udp-buffers.conf ...
net.core.rmem_max = 10485760
net.core.netdev_max_backlog = 100000
* Applying /usr/lib/sysctl.d/50-default.conf ...
net.ipv4.conf.all.promote_secondaries = 1
net.core.default_qdisc = fq_codel
* Applying /etc/sysctl.d/99-sysctl.conf ...
vm.overcommit_memory = 1
* Applying /etc/sysctl.conf ...
vm.overcommit_memory = 1
Setting up libevent-2.1-6:amd64 (2.1.8-stable-4build1) ...
Setting up lua-sec:amd64 (0.6-4) ...
Setting up jitsi-meet-web-config (1.0.3729-1) ...
----------------

You can now switch to a Let’s Encrypt certificate. To do so, execute:
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh

----------------
Setting up lua-filesystem:amd64 (1.6.3-1) ...
Setting up lua-bitop:amd64 (1.0.2-5) ...
Setting up jitsi-meet-web (1.0.3729-1) ...
Setting up lua5.1 (5.1.5-8.1build2) ...
update-alternatives: using /usr/bin/lua5.1 to provide /usr/bin/lua (lua-interpreter) in auto mode
update-alternatives: using /usr/bin/luac5.1 to provide /usr/bin/luac (lua-compiler) in auto mode
Setting up lua-expat:amd64 (1.3.0-4) ...
Setting up lua-event:amd64 (0.4.3-2build1) ...
Setting up jicofo (1.0-508-1) ...
Setting up prosody (0.10.0-1build1) ...
Adding user prosody to group ssl-cert
Setting up jitsi-meet-prosody (1.0.3729-1) ...
Generating RSA private key, 2048 bit long modulus (2 primes)
.......................................................+++++
...........................................................................................................................+++++
e is 65537 (0x010001)
Choose key size (2048): Key written to /var/lib/prosody/meet.mydomain.fr.key
Please provide details to include in the certificate config file.
Leave the field empty to use the default value or '.' to exclude the field.
countryName (FR): localityName (The Internet): organizationName (Your Organisation): organizationalUnitName (XMPP Department): commonName (meet.mydomain.fr): emailAddress (xmpp@meet.mydomain.fr): 
Config written to /var/lib/prosody/meet.mydomain.fr.cnf
Certificate written to /var/lib/prosody/meet.mydomain.fr.crt

Generating RSA private key, 2048 bit long modulus (2 primes)
.......................................+++++
.........................................................................................+++++
e is 65537 (0x010001)
Choose key size (2048): Key written to /var/lib/prosody/auth.meet.mydomain.fr.key
Please provide details to include in the certificate config file.
Leave the field empty to use the default value or '.' to exclude the field.
countryName (FR): localityName (The Internet): organizationName (Your Organisation): organizationalUnitName (XMPP Department): commonName (auth.meet.mydomain.fr): emailAddress (xmpp@auth.meet.mydomain.fr): 
Config written to /var/lib/prosody/auth.meet.mydomain.fr.cnf
Certificate written to /var/lib/prosody/auth.meet.mydomain.fr.crt

Clearing symlinks in /etc/ssl/certs...
done.
Updating certificates in /etc/ssl/certs...
134 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...

Replacing debian:ACCVRAIZ1.pem
Replacing debian:AC_RAIZ_FNMT-RCM.pem
Replacing debian:Actalis_Authentication_Root_CA.pem
Replacing debian:AddTrust_External_Root.pem
Replacing debian:AffirmTrust_Commercial.pem
Replacing debian:AffirmTrust_Networking.pem
Replacing debian:AffirmTrust_Premium.pem
Replacing debian:AffirmTrust_Premium_ECC.pem
Replacing debian:Amazon_Root_CA_1.pem
Replacing debian:Amazon_Root_CA_2.pem
Replacing debian:Amazon_Root_CA_3.pem
Replacing debian:Amazon_Root_CA_4.pem
Replacing debian:Atos_TrustedRoot_2011.pem
Replacing debian:Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
Replacing debian:Baltimore_CyberTrust_Root.pem
Replacing debian:Buypass_Class_2_Root_CA.pem
Replacing debian:Buypass_Class_3_Root_CA.pem
Replacing debian:CA_Disig_Root_R2.pem
Replacing debian:CFCA_EV_ROOT.pem
Replacing debian:COMODO_Certification_Authority.pem
Replacing debian:COMODO_ECC_Certification_Authority.pem
Replacing debian:COMODO_RSA_Certification_Authority.pem
Replacing debian:Certigna.pem
Replacing debian:Certinomis_-_Root_CA.pem
Replacing debian:Certplus_Class_2_Primary_CA.pem
Replacing debian:Certplus_Root_CA_G1.pem
Replacing debian:Certplus_Root_CA_G2.pem
Replacing debian:Certum_Trusted_Network_CA.pem
Replacing debian:Certum_Trusted_Network_CA_2.pem
Replacing debian:Chambers_of_Commerce_Root_-_2008.pem
Replacing debian:Comodo_AAA_Services_root.pem
Replacing debian:Cybertrust_Global_Root.pem
Replacing debian:D-TRUST_Root_Class_3_CA_2_2009.pem
Replacing debian:D-TRUST_Root_Class_3_CA_2_EV_2009.pem
Replacing debian:DST_Root_CA_X3.pem
Replacing debian:Deutsche_Telekom_Root_CA_2.pem
Replacing debian:DigiCert_Assured_ID_Root_CA.pem
Replacing debian:DigiCert_Assured_ID_Root_G2.pem
Replacing debian:DigiCert_Assured_ID_Root_G3.pem
Replacing debian:DigiCert_Global_Root_CA.pem
Replacing debian:DigiCert_Global_Root_G2.pem
Replacing debian:DigiCert_Global_Root_G3.pem
Replacing debian:DigiCert_High_Assurance_EV_Root_CA.pem
Replacing debian:DigiCert_Trusted_Root_G4.pem
Replacing debian:E-Tugra_Certification_Authority.pem
Replacing debian:EC-ACC.pem
Replacing debian:EE_Certification_Centre_Root_CA.pem
Replacing debian:Entrust.net_Premium_2048_Secure_Server_CA.pem
Replacing debian:Entrust_Root_Certification_Authority.pem
Replacing debian:Entrust_Root_Certification_Authority_-_EC1.pem
Replacing debian:Entrust_Root_Certification_Authority_-_G2.pem
Replacing debian:GDCA_TrustAUTH_R5_ROOT.pem
Replacing debian:GeoTrust_Global_CA.pem
Replacing debian:GeoTrust_Primary_Certification_Authority.pem
Replacing debian:GeoTrust_Primary_Certification_Authority_-_G2.pem
Replacing debian:GeoTrust_Primary_Certification_Authority_-_G3.pem
Replacing debian:GeoTrust_Universal_CA.pem
Replacing debian:GeoTrust_Universal_CA_2.pem
Replacing debian:GlobalSign_ECC_Root_CA_-_R4.pem
Replacing debian:GlobalSign_ECC_Root_CA_-_R5.pem
Replacing debian:GlobalSign_Root_CA.pem
Replacing debian:GlobalSign_Root_CA_-_R2.pem
Replacing debian:GlobalSign_Root_CA_-_R3.pem
Replacing debian:Global_Chambersign_Root_-_2008.pem
Replacing debian:Go_Daddy_Class_2_CA.pem
Replacing debian:Go_Daddy_Root_Certificate_Authority_-_G2.pem
Replacing debian:Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem
Replacing debian:Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
Replacing debian:Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem
Replacing debian:Hongkong_Post_Root_CA_1.pem
Replacing debian:ISRG_Root_X1.pem
Replacing debian:IdenTrust_Commercial_Root_CA_1.pem
Replacing debian:IdenTrust_Public_Sector_Root_CA_1.pem
Replacing debian:Izenpe.com.pem
Replacing debian:LuxTrust_Global_Root_2.pem
Replacing debian:Microsec_e-Szigno_Root_CA_2009.pem
Replacing debian:NetLock_Arany_=Class_Gold=_Főtanúsítvány.pem
Replacing debian:Network_Solutions_Certificate_Authority.pem
Replacing debian:OISTE_WISeKey_Global_Root_GA_CA.pem
Replacing debian:OISTE_WISeKey_Global_Root_GB_CA.pem
Replacing debian:OpenTrust_Root_CA_G1.pem
Replacing debian:OpenTrust_Root_CA_G2.pem
Replacing debian:OpenTrust_Root_CA_G3.pem
Replacing debian:QuoVadis_Root_CA.pem
Replacing debian:QuoVadis_Root_CA_1_G3.pem
Replacing debian:QuoVadis_Root_CA_2.pem
Replacing debian:QuoVadis_Root_CA_2_G3.pem
Replacing debian:QuoVadis_Root_CA_3.pem
Replacing debian:QuoVadis_Root_CA_3_G3.pem
Replacing debian:SSL.com_EV_Root_Certification_Authority_ECC.pem
Replacing debian:SSL.com_EV_Root_Certification_Authority_RSA_R2.pem
Replacing debian:SSL.com_Root_Certification_Authority_ECC.pem
Replacing debian:SSL.com_Root_Certification_Authority_RSA.pem
Replacing debian:SZAFIR_ROOT_CA2.pem
Replacing debian:SecureSign_RootCA11.pem
Replacing debian:SecureTrust_CA.pem
Replacing debian:Secure_Global_CA.pem
Replacing debian:Security_Communication_RootCA2.pem
Replacing debian:Security_Communication_Root_CA.pem
Replacing debian:Sonera_Class_2_Root_CA.pem
Replacing debian:Staat_der_Nederlanden_EV_Root_CA.pem
Replacing debian:Staat_der_Nederlanden_Root_CA_-_G2.pem
Replacing debian:Staat_der_Nederlanden_Root_CA_-_G3.pem
Replacing debian:Starfield_Class_2_CA.pem
Replacing debian:Starfield_Root_Certificate_Authority_-_G2.pem
Replacing debian:Starfield_Services_Root_Certificate_Authority_-_G2.pem
Replacing debian:SwissSign_Gold_CA_-_G2.pem
Replacing debian:SwissSign_Silver_CA_-_G2.pem
Replacing debian:T-TeleSec_GlobalRoot_Class_2.pem
Replacing debian:T-TeleSec_GlobalRoot_Class_3.pem
Replacing debian:TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem
Replacing debian:TWCA_Global_Root_CA.pem
Replacing debian:TWCA_Root_Certification_Authority.pem
Replacing debian:Taiwan_GRCA.pem
Replacing debian:TeliaSonera_Root_CA_v1.pem
Replacing debian:TrustCor_ECA-1.pem
Replacing debian:TrustCor_RootCert_CA-1.pem
Replacing debian:TrustCor_RootCert_CA-2.pem
Replacing debian:Trustis_FPS_Root_CA.pem
Replacing debian:TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5.pem
Replacing debian:USERTrust_ECC_Certification_Authority.pem
Replacing debian:USERTrust_RSA_Certification_Authority.pem
Replacing debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G4.pem
Replacing debian:VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem
Replacing debian:VeriSign_Universal_Root_Certification_Authority.pem
Replacing debian:Verisign_Class_3_Public_Primary_Certification_Authority_-_G3.pem
Replacing debian:Visa_eCommerce_Root.pem
Replacing debian:XRamp_Global_CA_Root.pem
Replacing debian:certSIGN_ROOT_CA.pem
Replacing debian:ePKI_Root_Certification_Authority.pem
Replacing debian:thawte_Primary_Root_CA.pem
Replacing debian:thawte_Primary_Root_CA_-_G2.pem
Replacing debian:thawte_Primary_Root_CA_-_G3.pem
Replacing debian:auth.meet.mydomain.fr.pem
done.
done.
Setting up jitsi-meet (1.0.4101-1) ...
Processing triggers for systemd (237-3ubuntu10.39) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Processing triggers for ureadahead (0.100.0-21) ...
Processing triggers for libc-bin (2.27-3ubuntu1) ...
root@combnum:/# 
root@combnum:/# 
root@combnum:/# /usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
-------------------------------------------------------------------------
This script will:
- Need a working DNS record pointing to this machine(for domain meet.mydomain.fr)
- Download certbot-auto from https://dl.eff.org to /usr/local/sbin
- Install additional dependencies in order to request Let’s Encrypt certificate
- If running with jetty serving web content, will stop Jitsi Videobridge
- Configure and reload nginx or apache2, whichever is used

You need to agree to the ACME server's Subscriber Agreement (https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf) 
by providing an email address for important account notifications
Enter your email and press [ENTER]: myid@mydomain.fr
Bootstrapping dependencies for Debian-based OSes... (you can skip this with --no-bootstrap)
Hit:1 http://mirrors.online.net/ubuntu bionic InRelease
Hit:2 http://mirrors.online.net/ubuntu bionic-updates InRelease                                                                                                                                                   
Hit:3 http://mirrors.online.net/ubuntu bionic-backports InRelease                                                                                                                                                 
Hit:4 http://security.ubuntu.com/ubuntu bionic-security InRelease                                                                                                                                                 
Hit:5 http://ppa.launchpad.net/certbot/certbot/ubuntu bionic InRelease                                                                                                                                            
Hit:6 http://ppa.launchpad.net/openjdk-r/ppa/ubuntu bionic InRelease                                                                                                                                              
Hit:7 https://download.docker.com/linux/ubuntu bionic InRelease                                                                                                                                                   
Hit:8 https://download.jitsi.org stable/ InRelease                                                                                                                                                                
Ign:9 http://download.webmin.com/download/repository sarge InRelease                                                                                                  
Hit:10 http://download.webmin.com/download/repository sarge Release                  
Hit:11 https://deb.nodesource.com/node_12.x bionic InRelease    
Reading package lists... Done                                   
Reading package lists... Done
Building dependency tree       
Reading state information... Done
augeas-lenses is already the newest version (1.10.1-2).
augeas-lenses set to manually installed.
ca-certificates is already the newest version (20180409).
libaugeas0 is already the newest version (1.10.1-2).
libaugeas0 set to manually installed.
python is already the newest version (2.7.15~rc1-1).
python set to manually installed.
gcc is already the newest version (4:7.4.0-1ubuntu2.3).
gcc set to manually installed.
openssl is already the newest version (1.1.1d-1+ubuntu18.04.1+deb.sury.org+2).
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 libssl-dev : Depends: libssl1.1 (= 1.1.1-1ubuntu2.1~18.04.5) but 1.1.1d-1+ubuntu18.04.1+deb.sury.org+2 is to be installed
E: Unable to correct problems, you have held broken packages.

All we do is call this: https://github.com/jitsi/jitsi-meet/blob/master/resources/install-letsencrypt-cert.sh#L28
So you need to report that to the team responsible for certbot.

OK thanks @damencho, I bypassed this step quite easily reading the bash you mentioned…