OPENSSLVER=3.5.8
OPENSSLMIR=https://github.com/openssl/openssl/releases/download/openssl-${OPENSSLVER}/
OPENSSLSRC=openssl-${OPENSSLVER}.tar.gz

DEBMIRROR=${APT_MIRROR:+http://${APT_MIRROR}/debian/}
DEBMIRROR=${DEBMIRROR:-http://deb.debian.org/debian/}
OPENSSH_SIDPKG=10.5p1-1
[[ -z $OPENSSH_SIDPKG ]] && \
	OPENSSH_SIDPKG=$(wget -qO- http://deb.debian.org/debian/pool/main/o/openssh/ | grep -oP 'openssh_\K[0-9]+\.[0-9]+p[0-9]+-[0-9]+(?:~bpo[0-9]+(?:\+[0-9]+)?)?' | sort -V | tail -n 1)
#	OPENSSH_SIDPKG=$(wget --no-check-certificate -qO- https://packages.debian.org/sid/openssh-server | sed -n '/vcurrent/s/ *<[^>]*> *//gp' | head -n1 | cut -d: -f2)

OPENSSHVER=$(echo $OPENSSH_SIDPKG|cut -d- -f1)

# debhelper .debs for old distros: pullsrc.sh downloads them on the host into
# builddep/, install_deps.sh installs them there (old distros cannot build the
# sid OpenSSH source with their own debhelper: dh-sequence-movetousr needs
# >= 13.11.7). The sid pool only keeps the current version, so bump this pin
# when it drifts; leave empty to auto-detect the latest from the pool.
DEBHELPER_SIDPKG=14.3
if [[ -z $DEBHELPER_SIDPKG ]]; then
	DEBHELPER_SIDPKG=$(wget -qO- $DEBMIRROR/pool/main/d/debhelper/ | grep -oP 'debhelper_\K[0-9][0-9.]+(?=_all\.deb)' | sort -V | tail -n 1)
fi