diff -Nru xmltooling-1.6.4/debian/changelog xmltooling-1.6.4/debian/changelog
--- xmltooling-1.6.4/debian/changelog	2018-02-28 22:19:08.000000000 +0000
+++ xmltooling-1.6.4/debian/changelog	2018-03-06 09:04:50.000000000 +0000
@@ -1,3 +1,10 @@
+xmltooling (1.6.4-1ubuntu2) bionic; urgency=medium
+
+  * Switch back to openssl1.0 via newly-added libcurl-openssl1.0-dev, since
+    libxml-security is not ported to openssl1.1.
+
+ -- Steve Langasek <steve.langasek@ubuntu.com>  Tue, 06 Mar 2018 10:04:50 +0100
+
 xmltooling (1.6.4-1ubuntu1) bionic; urgency=medium
 
   * Switch build-depends for OpenSSL 1.1.
diff -Nru xmltooling-1.6.4/debian/control xmltooling-1.6.4/debian/control
--- xmltooling-1.6.4/debian/control	2018-02-28 22:19:08.000000000 +0000
+++ xmltooling-1.6.4/debian/control	2018-03-06 09:04:50.000000000 +0000
@@ -14,9 +14,9 @@
 # https://wiki.debian.org/GCC7).  Omit this and the shlibs for backports:
  g++ (>=4:7),
  libboost-dev,
- libcurl4-openssl-dev,
+ libcurl-openssl1.0-dev,
  liblog4shib-dev,
- libssl-dev,
+ libssl1.0-dev,
  libxerces-c-dev,
 # our Debian changes need the pkg-config file from:
  libxml-security-c-dev (>= 1.7.3-3~),
@@ -51,9 +51,9 @@
 Architecture: any
 Multi-Arch: same
 Depends:
- libcurl4-openssl-dev,
+ libcurl-openssl1.0-dev,
  liblog4shib-dev,
- libssl-dev,
+ libssl1.0-dev,
  libxerces-c-dev,
  libxml-security-c-dev,
  libxmltooling7 (= ${binary:Version}),