gnu: OpenSSL 1.0.2: Hide this package.

* gnu/packages/tls.scm (openssl-1.0): Wrap in 'hidden-package'.

gnu/packages/tls.scm

@@ -509,7 +509,22 @@ required structures.")
                (base32
                 "1rdfzcrxy9y38wqdw5942vmdax9hjhgrprzxm42csal7p5shhal9"))))))
 
+;; We will not add any new uses of this package. If you add new code that uses
+;; this package, your change will be reverted!
+;;
+;; The only acceptable use for this package is to bootstrap Rust, in
+;; ((gnu packages rust) rust-1.19).
+;;
+;; OpenSSL 1.0 is no longer suppported upstream [0] and has several security
+;; vulnerabilities that will not be fixed [1].
+;;
+;; For more information from the Guix point of view, see
+;; <https://bugs.gnu.org/46602>.
+;;
+;; [0] https://www.openssl.org/policies/releasestrat.html
+;; [1] https://www.openssl.org/news/vulnerabilities.html
 (define-public openssl-1.0
+  (hidden-package
     (package
       (inherit openssl)
       (name "openssl")
@@ -600,7 +615,7 @@ required structures.")
                  (let ((out (assoc-ref outputs "out")))
                    (delete-file-recursively (string-append out "/share/openssl-"
                                                            ,version "/misc"))
-                 #t)))))))))
+                   #t))))))))))
 
 (define-public libressl
   (package