diff --git a/.gitignore b/.gitignore
index 573e2b0..9280e62 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
+.DS_Store
 /src/out/
 /builds/
diff --git a/ssl/trusty/Makefile b/ssl/trusty/Makefile
new file mode 100644
index 0000000..0b7d835
--- /dev/null
+++ b/ssl/trusty/Makefile
@@ -0,0 +1,17 @@
+#!/usr/bin/make -f
+
+all:
+	cd openssl && \
+	./config --prefix=/opt/extpython/ssl/1.1.1k --openssldir=/opt/extpython/ssl/1.1.1k shared zlib && \
+	make -j8
+	#&& \
+	#echo "testing...." && \
+	#make test
+
+install:
+	cd openssl && \
+	make install
+
+clean:
+	cd openssl && \
+	make clean || true
diff --git a/ssl/trusty/build-inner.sh b/ssl/trusty/build-inner.sh
new file mode 100755
index 0000000..0700c7f
--- /dev/null
+++ b/ssl/trusty/build-inner.sh
@@ -0,0 +1,8 @@
+#!/bin/bash -eux
+
+sudo -Hu builder /src/build-user.sh
+
+# export the debs
+OUTDIR="/src/out/trusty/1.1.1k"
+mkdir -p $OUTDIR
+cp /build/out/* $OUTDIR
diff --git a/ssl/trusty/build-user.sh b/ssl/trusty/build-user.sh
new file mode 100755
index 0000000..654a27e
--- /dev/null
+++ b/ssl/trusty/build-user.sh
@@ -0,0 +1,30 @@
+#!/bin/bash -eux
+
+function template {
+    perl -p -e 's/\$\{([^}]+)\}/defined $ENV{$1} ? $ENV{$1} : $&/eg' < $1
+}
+
+cd /build
+mkdir work
+cd work
+
+mkdir openssl
+wget -O- -q http://artifact.scc.net.davepedu.com/repo/tar/openssl/openssl/openssl-1.1.1k.tar.gz | tar zxf - -C openssl/ --strip-components=1
+
+# generate debian metadata
+mkdir debian
+export BUILD_DATE=$(date -R)
+template /src/debian/changelog | tee debian/changelog
+template /src/debian/control | tee debian/control
+cp /src/debian/compat debian/
+cp /src/debian/rules debian/
+cp /src/Makefile ./
+
+# build the deb
+time dpkg-buildpackage -us -uc -b
+
+cd ..
+mkdir -p out
+mv *.deb out/
+cd out
+sha256sum *
diff --git a/ssl/trusty/build.sh b/ssl/trusty/build.sh
new file mode 100755
index 0000000..5ad0395
--- /dev/null
+++ b/ssl/trusty/build.sh
@@ -0,0 +1,3 @@
+#!/bin/bash -eux
+
+time docker run -it --rm -v $PWD:/src --entrypoint /src/build-inner.sh extbuilder-trusty-deps
diff --git a/ssl/trusty/debian/changelog b/ssl/trusty/debian/changelog
new file mode 100644
index 0000000..2b01738
--- /dev/null
+++ b/ssl/trusty/debian/changelog
@@ -0,0 +1,5 @@
+extpython-openssl-1-1 (1.1.1k) unstable; urgency=low
+
+  * Initial release
+
+ -- Dave Pedu <dave@davepedu.com>  ${BUILD_DATE}
diff --git a/ssl/trusty/debian/compat b/ssl/trusty/debian/compat
new file mode 100644
index 0000000..ec63514
--- /dev/null
+++ b/ssl/trusty/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/ssl/trusty/debian/control b/ssl/trusty/debian/control
new file mode 100644
index 0000000..810b074
--- /dev/null
+++ b/ssl/trusty/debian/control
@@ -0,0 +1,13 @@
+Source: extpython-openssl-1-1
+Section: unknown
+Priority: optional
+Maintainer: ubuntu <ubuntu@unknown>
+Build-Depends: debhelper (>= 8.0.0)
+Standards-Version: 3.9.4
+Homepage: <insert the upstream URL, if relevant>
+
+Package: extpython-openssl-1-1
+Architecture: amd64
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: <insert up to 60 chars description>
+ <insert long description, indented with spaces>
diff --git a/ssl/trusty/debian/rules b/ssl/trusty/debian/rules
new file mode 100755
index 0000000..7a0452a
--- /dev/null
+++ b/ssl/trusty/debian/rules
@@ -0,0 +1,13 @@
+#!/usr/bin/make -f
+# -*- makefile -*-
+
+export DH_VERBOSE=1
+
+override_dh_usrlocal:
+override_dh_strip:
+
+override_dh_shlibdeps:
+	dh_shlibdeps -l /opt/extpython/ssl/1.1.1k/lib
+
+%:
+	dh $@
diff --git a/ssl/trusty/out/.gitignore b/ssl/trusty/out/.gitignore
new file mode 100644
index 0000000..72e8ffc
--- /dev/null
+++ b/ssl/trusty/out/.gitignore
@@ -0,0 +1 @@
+*