Note: This refers to the new OpenSSL 1.0.2.g packages that are only in staging/community-staging so far.

Problem: The luasec packages will not work when OpenSSL >= 1.0.2g is used, because that version doesn't support SSLv2 and SSLv3 anymore in its default configuration (this also applies to the Archlinux packages).

While the luasec packages will happily compile, they' just crash when you try to use them, because the luasec modules try to use SSLv23 and SSLv3 symbols which do not exist anymore. Here is an example with lua5.1:

$ ./test1.lua
/usr/bin/lua5.1: error loading module 'ssl.core' from file '/usr/lib/lua/5.1/ssl.so':
/usr/lib/lua/5.1/ssl.so: undefined symbol: SSLv3_method
stack traceback:
[C]: ?
[C]: in function 'require'
/usr/share/lua/5.1/ssl.lua:7: in main chunk
[C]: in function 'require'
./test1.lua:6: in main chunk
[C]: ?

Note that these crashes occur even if you don't use SSLv2/SSLv3 at all in your lua code. Thus, calls to said SSLv23 and SSLv3 symbols need to be removed from the luasec code. This will of course break lua code using SSLv2/SSLv3, but at least code *only* using TLSv1/1.1/1.2 will work again. More precisely, this will make work prosody again.