#233 Does not build with OpenSSL 3
Closed: fixed 2 years ago by rcritten. Opened 2 years ago by tjaalton.

Debian will soon migrate to OpenSSL 3, and Ubuntu already did for 22.04, but the build fails:

gcc   -I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -ffile-prefix-map=/<<BUILDDIR>>/certmonger-0.79.14+git20211010=. -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/x86_64-linux-gnu -g -O2 -ffile-prefix-map=/<<BUILDDIR>>/certmonger-0.79.14+git20211010=. -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o scep-submit scep_submit-scep.o scep_submit-submit-h.o scep_submit-util-m.o scep_submit-util-o.o scep_submit-submit-u.o scep_submit-util.o scep_submit-log.o scep_submit-pkcs7.o scep_submit-store-gen.o scep_submit-tm.o scep_submit-prefs.o scep_submit-prefs-o.o scep_submit-scep-o.o scep_submit-env-system.o -lcurl -lxml2 -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4 -lplc4 -lnspr4 -lcrypto -ltalloc  -luuid  -lpopt
../../src/submit-h.c: In function ‘cm_submit_h_run’:
../../src/submit-h.c:257:17: warning: call to ‘_curl_easy_setopt_err_write_callback’ declared with attribute warning: curl_easy_setopt expects a curl_write_callback argument for this option [-Wattribute-warning]
  257 |                 curl_easy_setopt(ctx->curl, CURLOPT_WRITEFUNCTION,
      |                 ^
/usr/bin/ld: /tmp/ccPXkLF2.ltrans0.ltrans.o: in function `main':
./build/src/../../src/util-o.c:54: undefined reference to `OPENSSL_init_ssl'
collect2: error: ld returned 1 exit status

This is fixed in the current HEAD. I can do a new release in the new year.

Our package is based on 46cd5a7, and I don't think the two commits after that help?

I have some vague memory of seeing this problem but I don't remember what I did to address it beyond the current patches. This builds fine in Fedora 36 against OpenSSL 3.0.0:

https://koji.fedoraproject.org/koji/buildinfo?buildID=1841184

I guess I'll have to fire up Ubuntu to try to see what is going on.

No need to test on Debian/Ubuntu, just push all the distro patches upstream ;)

actually it's just 0001-candidate-openssl-3.0-compat-fixes.patch which is missing upstream

maybe clean all the obsolete patches from the rpm while at it :)
https://src.fedoraproject.org/rpms/certmonger/tree/rawhide

Merged the candidate patch upstream as 8b0589d

Released 0.79.15

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata