Code review comment for ~ahasenack/ubuntu/+source/apache2:cosmic-apache-fix-curl-transition

Chasing down libxmltooling7 with openssl 1.1 is not worth it at this time, according to slangasek.

Also, to help understand the libcurl confusion, I think this simple statement helps:

libcurl3: curl4 with openssl 1.0
libcurl4: curl4 with openssl 1.1

<slangasek> the renaming of the libcurl3 binary package to libcurl4 *means* that it's built with openss1.1; that is the ABI change

With that in mind, I think these are the options we have:
a) this MP, which doesn't build libapache2-mod-md (which is what pulls in libcurl4 as a dependency of apache2-bin)
b) building the *bundled* mod-md with openssl 1.0 (nope)
c) building the *bundled* mod-md and shipping it as a separate package.

I think (a) gets us over this hurdle, and gives us time to think about a proper solution
(b) is not doable, as apache2 bundles mod_ssl and we definitely want that with openssl 1.1 (not 1.0).

(c) is doable, I could test that.

All mean a delta with debian, (c) being the biggest one probably as it means a populated package, with a <pkg>.install file, postinst, postrm (it's an apache module that we have to take care of), etc.

This MP lets the necessary packages be installed just like they are in cosmic right now. In order to install libapache2-mod-shib2, one has to specify "libcurl3" in the command line as well and cope with the removal of curl, ubuntu-server and a few others.