Fix openssl_dev_headers dep check to require the header

_core_dep_satisfied treated the openssl binary as evidence that the
dev headers were installed. Minimal images (e.g. python:3.11-slim)
ship openssl but not libssl-dev, so the check returned True and the
core-deps installer skipped installing the headers, breaking source
builds like medusa that need openssl/ssl.h.

Closes #3272.

Author: liquidsec

bbot/core/helpers/depsinstaller/installer.py

@@ -453,14 +453,16 @@ def _core_dep_satisfied(self, command):
         For special entries like openssl_dev_headers, use a custom check.
         """
         if command == "openssl_dev_headers":
-            # check for openssl headers by looking for the pkg-config file or header
+            # look for the actual header. the openssl binary is NOT a proxy: many minimal
+            # images (e.g. python:3.11-slim) ship openssl but not the -dev headers, and
+            # anything that compiles against libssl needs the header.
             return any(
                 Path(p).exists()
                 for p in [
                     "/usr/include/openssl/ssl.h",
                     "/usr/local/include/openssl/ssl.h",
                 ]
-            ) or bool(self.parent_helper.which("openssl"))
+            )
         return bool(self.parent_helper.which(command))
 
     async def install_core_deps(self):