Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1006585: tpm2-tss-engine: FTBFS with OpenSSL 3.0

173 views
Skip to first unread message

Sebastian Andrzej Siewior

unread,
Feb 27, 2022, 6:10:03 PM2/27/22
to
Source: tpm2-tss-engine
Version: 1.1.0-2
Severity: important
Tags: bookworm sid
User: pkg-open...@lists.alioth.debian.org
Usertags: ftbfs-3.0

Your package is failing to build using OpenSSL 3.0 with the
following error:

| gcc -DHAVE_CONFIG_H -I. -I./src -Wdate-time -D_FORTIFY_SOURCE=2 -I./include -I./src -std=c99 -Wall -Wextra -Wformat-security -Werror -fstack-protector-all -fpic -fPIC -Wno-missing-braces -I/usr/include/tss2 -I/usr/include/tss2 -I/usr/include/tss2 -g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -g -c -o src/tpm2tss_genkey-tpm2tss-genkey.o `test -f 'src/tpm2tss-genkey.c' || echo './'`src/tpm2tss-genkey.c
| src/tpm2tss-genkey.c: In function ‘genkey_rsa’:
| src/tpm2tss-genkey.c:232:5: error: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 232 | rsa = RSA_new();
| | ^~~
| In file included from /usr/include/openssl/engine.h:25,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/rsa.h:201:28: note: declared here
| 201 | OSSL_DEPRECATEDIN_3_0 RSA *RSA_new(void);
| | ^~~~~~~
| src/tpm2tss-genkey.c:240:9: error: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 240 | RSA_free(rsa);
| | ^~~~~~~~
| In file included from /usr/include/openssl/engine.h:25,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/rsa.h:293:28: note: declared here
| 293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
| | ^~~~~~~~
| src/tpm2tss-genkey.c:251:9: error: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 251 | RSA_free(rsa);
| | ^~~~~~~~
| In file included from /usr/include/openssl/engine.h:25,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/rsa.h:293:28: note: declared here
| 293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
| | ^~~~~~~~
| src/tpm2tss-genkey.c:254:5: error: ‘RSA_get_ex_data’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 254 | memcpy(tpm2Data, RSA_get_app_data(rsa), sizeof(*tpm2Data));
| | ^~~~~~
| In file included from /usr/include/openssl/engine.h:25,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/rsa.h:446:29: note: declared here
| 446 | OSSL_DEPRECATEDIN_3_0 void *RSA_get_ex_data(const RSA *r, int idx);
| | ^~~~~~~~~~~~~~~
| src/tpm2tss-genkey.c:257:5: error: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 257 | RSA_free(rsa);
| | ^~~~~~~~
| In file included from /usr/include/openssl/engine.h:25,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/rsa.h:293:28: note: declared here
| 293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
| | ^~~~~~~~
| src/tpm2tss-genkey.c: In function ‘genkey_ecdsa’:
| src/tpm2tss-genkey.c:273:5: error: ‘EC_KEY_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 273 | eckey = EC_KEY_new();
| | ^~~~~
| In file included from /usr/include/openssl/engine.h:28,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/ec.h:966:31: note: declared here
| 966 | OSSL_DEPRECATEDIN_3_0 EC_KEY *EC_KEY_new(void);
| | ^~~~~~~~~~
| src/tpm2tss-genkey.c:279:9: error: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 279 | EC_KEY_free(eckey);
| | ^~~~~~~~~~~
| In file included from /usr/include/openssl/engine.h:28,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/ec.h:1001:28: note: declared here
| 1001 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c:287:9: error: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 287 | EC_KEY_free(eckey);
| | ^~~~~~~~~~~
| In file included from /usr/include/openssl/engine.h:28,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/ec.h:1001:28: note: declared here
| 1001 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c:292:5: error: ‘EC_KEY_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 292 | EC_KEY_free(eckey);
| | ^~~~~~~~~~~
| In file included from /usr/include/openssl/engine.h:28,
| from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/ec.h:1001:28: note: declared here
| 1001 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c: In function ‘main’:
| src/tpm2tss-genkey.c:324:5: error: ‘ENGINE_by_id’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 324 | ENGINE *tpm_engine = ENGINE_by_id("tpm2tss");
| | ^~~~~~
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:336:31: note: declared here
| 336 | OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
| | ^~~~~~~~~~~~
| src/tpm2tss-genkey.c:326:9: error: ‘ENGINE_by_id’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 326 | tpm_engine = ENGINE_by_id("libtpm2tss");
| | ^~~~~~~~~~
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:336:31: note: declared here
| 336 | OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
| | ^~~~~~~~~~~~
| src/tpm2tss-genkey.c:332:5: error: ‘ENGINE_init’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 332 | int init_res = ENGINE_init(tpm_engine);
| | ^~~
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:620:27: note: declared here
| 620 | OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c:333:5: error: ‘ENGINE_get_name’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 333 | VERB("Engine name: %s\nInit result: %d \n", ENGINE_get_name(tpm_engine),
| | ^~~~
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:553:35: note: declared here
| 553 | OSSL_DEPRECATEDIN_3_0 const char *ENGINE_get_name(const ENGINE *e);
| | ^~~~~~~~~~~~~~~
| src/tpm2tss-genkey.c:339:13: error: ‘ENGINE_ctrl’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 339 | !ENGINE_ctrl(tpm_engine, TPM2TSS_SET_OWNERAUTH, 0, opt.ownerpw, NULL)) {
| | ^
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:429:27: note: declared here
| 429 | OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl(ENGINE *e, int cmd, long i, void *p,
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c:345:13: error: ‘ENGINE_ctrl’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 345 | !ENGINE_ctrl(tpm_engine, TPM2TSS_SET_PARENTAUTH, 0, opt.parentpw, NULL)) {
| | ^
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:429:27: note: declared here
| 429 | OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl(ENGINE *e, int cmd, long i, void *p,
| | ^~~~~~~~~~~
| src/tpm2tss-genkey.c:351:13: error: ‘ENGINE_ctrl’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 351 | !ENGINE_ctrl(tpm_engine, TPM2TSS_SET_TCTI, 0, opt.tcti_conf, NULL)) {
| | ^
| In file included from src/tpm2tss-genkey.c:38:
| /usr/include/openssl/engine.h:429:27: note: declared here
| 429 | OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl(ENGINE *e, int cmd, long i, void *p,
| | ^~~~~~~~~~~
| cc1: all warnings being treated as errors
| make[1]: *** [Makefile:1216: src/tpm2tss_genkey-tpm2tss-genkey.o] Error 1

For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html

Sebastian

Luca Boccassi

unread,
Feb 27, 2022, 6:40:03 PM2/27/22
to
Control: tags -1 wontfix

On Sun, 27 Feb 2022 23:57:38 +0100 Sebastian Andrzej Siewior
<seba...@breakpoint.cc> wrote:
> Source: tpm2-tss-engine
> Version: 1.1.0-2
> Severity: important
> Tags: bookworm sid
> User: pkg-open...@lists.alioth.debian.org
> Usertags: ftbfs-3.0
>
> Your package is failing to build using OpenSSL 3.0 with the
> following error:

This is known and expected, this package is an engine for OpenSSL 1.x.
The 3.x version is shipped as a separate and different project, already
uploaded to experimental:

https://tracker.debian.org/pkg/tpm2-openssl

Once OpenSSL 3.x is uploaded to unstable, I will upload that too.

--
Kind regards,
Luca Boccassi
signature.asc

Sebastian Andrzej Siewior

unread,
May 18, 2022, 11:00:03 AM5/18/22
to
On 2022-02-27 23:37:35 [+0000], Luca Boccassi wrote:
> This is known and expected, this package is an engine for OpenSSL 1.x.
> The 3.x version is shipped as a separate and different project, already
> uploaded to experimental:
>
> https://tracker.debian.org/pkg/tpm2-openssl
>
> Once OpenSSL 3.x is uploaded to unstable, I will upload that too.

That happend. Could you fill a removal bug for tpm2-tss-engine? There is
no point in keeping that, right?

Sebastian
0 new messages