Skip to content

Fails to build with openssl-3.0 #70

@shartge

Description

@shartge

Debian will be transitioning to openssl-3.0 for the next release soonish.

During testing I found that radsecproxy fails to build:

gcc -g -Wall -Werror -fno-strict-aliasing -I/usr/include -I/usr/include/openssl -Wall -pedantic -Wno-long-long -pthread -DRADPROT_UDP -DRADPROT_TCP -DRADPROT_TLS -DRADPROT_DTLS -g -O2 -fdebug-prefix-map=/build/radsecproxy-1.8.2=. -fstack-protector-strong -Wformat -Werror=format-security  -Wl,-z,relro -Wl,-z,now -o radsecproxy-conf catgconf.o debug.o gconfig.o util.o  -lnettle 
tlscommon.c: In function 'cookie_calculate_hash':
tlscommon.c:167:5: error: 'HMAC' is deprecated [-Werror=deprecated-declarations]
  167 |     HMAC(EVP_sha256(), (const void*) cookie_secret, COOKIE_SECRET_LENGTH,
      |     ^~~~
In file included from /usr/include/openssl/opensslv.h:109,
                 from /usr/include/openssl/macros.h:11,
                 from /usr/include/x86_64-linux-gnu/openssl/opensslconf.h:14,
                 from /usr/include/openssl/macros.h:10,
                 from /usr/include/openssl/ssl.h:16,
                 from tlscommon.c:25:
/usr/include/openssl/hmac.h:45:1: note: declared here
   45 | DEPRECATEDIN_3_0(unsigned char *HMAC(const EVP_MD *evp_md, const void *key,
      | ^~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors

As a workaround I could remove the error on deprecations but a real fix would be nice.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions