Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build fails with OpenSSL >= 3.0 built with OPENSSL_NO_DEPRECATED #1091

Closed
hardfalcon opened this issue Jun 16, 2024 · 1 comment
Closed

Build fails with OpenSSL >= 3.0 built with OPENSSL_NO_DEPRECATED #1091

hardfalcon opened this issue Jun 16, 2024 · 1 comment

Comments

@hardfalcon
Copy link
Contributor

hardfalcon commented Jun 16, 2024

Building unbound 1.20.0 fails at the ./configure stage on systems where OpenSSL >= 3.0 has been built with OPENSSL_NO_DEPRECATED enabled. This is caused by configure.ac checking for the existence of the ECDSA_sign and SHA384_Init functions, which have been deprecated in OpenSSL 3.0 and newer:

On most distros, this bug doesn't occur even with OpenSSL >= 3.0 installed because OpenSSL distro packages are usually not built with OPENSSL_NO_DEPRECATED enabled.

@wcawijngaards
Copy link
Member

Fixed the detection, that was attempting to detect EC support, to use the newer OPENSSL_NO_EC define that can detect EC support. That is used if another newer EVP_PKEY_fromdata function exists. So now it can detect the old support calls, or the newer support setting. Also fixes are a number of deprecated function uses. Thanks for the report!

jedisct1 added a commit to jedisct1/unbound that referenced this issue Jul 1, 2024
* nlnet/master:
  - Fix ip-ratelimit-cookie setting, it was not applied.
  - Explicitly set the RD bit for the mesh query flags when prefetching.   These queries have no waiting client but they need to be treated as   recursive.
  - Fix pkg-config availability check in dnstap/dnstap.m4 and   systemd.m4. - autoconf.
  - Fix NLnetLabs#1092: Ubuntu 22.04 Jammy fails to compile unbound 1.20.0; by   adding helpful text for the Python interpreter version and allowing   the default pkg-config unavailability error message to be shown. - autoconf.
  - Fix NLnetLabs#1091: Build fails with OpenSSL >= 3.0 built with   OPENSSL_NO_DEPRECATED.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants