MarsSeed [1] filed a deletion request for openssl-1.0-hardened [2]: This package has been abandoned for years. It does not validate its sources in any way (neither by checksum nor by PGP signature). And it uses an unaffiliated mirror server host. Not useful to keep. There's a much better packaged AUR/openssl-1.0 available to users. [1] https://aur.archlinux.org/account/MarsSeed/ [2] https://aur.archlinux.org/pkgbase/openssl-1.0-hardened/