#1006509 moonshot-trust-router: FTBFS with OpenSSL 3.0

Package:
src:moonshot-trust-router
Source:
moonshot-trust-router
Submitter:
Sebastian Andrzej Siewior
Date:
2022-05-22 21:21:04 UTC
Severity:
serious
Tags:
#1006509#5
Date:
2022-02-26 15:36:42 UTC
From:
To:
Your package is failing to build using OpenSSL 3.0 with the
following error:

| common/tr_dh.c: In function ‘tr_dh_new’:
| common/tr_dh.c:82:3: error: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|    82 |   return DH_new();
|       |   ^~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:199:27: note: declared here
|   199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
|       |                           ^~~~~~
| common/tr_dh.c: In function ‘tr_create_dh_params’:
| common/tr_dh.c:92:3: error: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|    92 |   if (NULL == (dh = DH_new()))
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:199:27: note: declared here
|   199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
|       |                           ^~~~~~
| common/tr_dh.c:98:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|    98 |     DH_free(dh);
|       |     ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:109:3: error: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   109 |   DH_set0_pqg(dh, p, q, g);
|       |   ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:255:27: note: declared here
|   255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:110:3: error: ‘DH_generate_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   110 |   DH_generate_key(dh);    /* generates the public key */
|       |   ^~~~~~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:223:27: note: declared here
|   223 | OSSL_DEPRECATEDIN_3_0 int DH_generate_key(DH *dh);
|       |                           ^~~~~~~~~~~~~~~
| common/tr_dh.c:113:5: error: ‘DH_set0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   113 |     DH_set0_key(dh, NULL, BN_bin2bn(priv_key, keylen, NULL));
|       |     ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:258:27: note: declared here
|   258 | OSSL_DEPRECATEDIN_3_0 int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:115:3: error: ‘DH_check’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   115 |   DH_check(dh, &dh_err);
|       |   ^~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:220:27: note: declared here
|   220 | OSSL_DEPRECATEDIN_3_0 int DH_check(const DH *dh, int *codes);
|       |                           ^~~~~~~~
| common/tr_dh.c: In function ‘tr_create_matching_dh’:
| common/tr_dh.c:143:3: error: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   143 |   if (NULL == (dh = DH_new())) {
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:199:27: note: declared here
|   199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
|       |                           ^~~~~~
| common/tr_dh.c:148:3: error: ‘DH_get0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   148 |   DH_get0_pqg(in_dh, &in_p, NULL, &in_g);
|       |   ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:253:28: note: declared here
|   253 | OSSL_DEPRECATEDIN_3_0 void DH_get0_pqg(const DH *dh, const BIGNUM **p,
|       |                            ^~~~~~~~~~~
| common/tr_dh.c:150:3: error: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   150 |   if (0 == DH_set0_pqg(dh, BN_dup(in_p), NULL, BN_dup(in_g))) {
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:255:27: note: declared here
|   255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:151:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   151 |     DH_free(dh);
|       |     ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:157:3: error: ‘DH_generate_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   157 |   DH_generate_key(dh);    /* generates the public key */
|       |   ^~~~~~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:223:27: note: declared here
|   223 | OSSL_DEPRECATEDIN_3_0 int DH_generate_key(DH *dh);
|       |                           ^~~~~~~~~~~~~~~
| common/tr_dh.c:160:5: error: ‘DH_set0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   160 |     DH_set0_key(dh, NULL, BN_bin2bn(priv_key, keylen, NULL));
|       |     ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:258:27: note: declared here
|   258 | OSSL_DEPRECATEDIN_3_0 int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:162:3: error: ‘DH_check’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   162 |   DH_check(dh, &dh_err);
|       |   ^~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:220:27: note: declared here
|   220 | OSSL_DEPRECATEDIN_3_0 int DH_check(const DH *dh, int *codes);
|       |                           ^~~~~~~~
| common/tr_dh.c: In function ‘tr_destroy_dh_params’:
| common/tr_dh.c:183:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   183 |     DH_free(dh);
|       |     ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c: In function ‘tr_dh_dup’:
| common/tr_dh.c:189:3: error: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   189 |   DH *out = DH_new();
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:199:27: note: declared here
|   199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
|       |                           ^~~~~~
| common/tr_dh.c:193:3: error: ‘DH_get0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   193 |   DH_get0_pqg(in, &in_p, &in_q, &in_g);
|       |   ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:253:28: note: declared here
|   253 | OSSL_DEPRECATEDIN_3_0 void DH_get0_pqg(const DH *dh, const BIGNUM **p,
|       |                            ^~~~~~~~~~~
| common/tr_dh.c:194:3: error: ‘DH_get0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   194 |   DH_get0_key(in, &in_pubkey, &in_privkey);
|       |   ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:256:28: note: declared here
|   256 | OSSL_DEPRECATEDIN_3_0 void DH_get0_key(const DH *dh, const BIGNUM **pub_key,
|       |                            ^~~~~~~~~~~
| common/tr_dh.c:204:7: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   204 |       DH_free(out);
|       |       ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:214:7: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   214 |       DH_free(out);
|       |       ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:224:7: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   224 |       DH_free(out);
|       |       ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:234:7: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   234 |       DH_free(out);
|       |       ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:244:7: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   244 |       DH_free(out);
|       |       ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:249:3: error: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   249 |   if (0 == DH_set0_pqg(out, out_p, out_q, out_g)) {
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:255:27: note: declared here
|   255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:250:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   250 |     DH_free(out);
|       |     ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c:254:3: error: ‘DH_set0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   254 |   if (0 == DH_set0_key(out, out_pubkey, out_privkey)) {
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:258:27: note: declared here
|   258 | OSSL_DEPRECATEDIN_3_0 int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key);
|       |                           ^~~~~~~~~~~
| common/tr_dh.c:255:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   255 |     DH_free(out);
|       |     ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| common/tr_dh.c: In function ‘tr_compute_dh_key’:
| common/tr_dh.c:276:3: error: ‘DH_size’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   276 |   buflen = DH_size(priv_dh);
|       |   ^~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:203:27: note: declared here
|   203 | OSSL_DEPRECATEDIN_3_0 int DH_size(const DH *dh);
|       |                           ^~~~~~~
| common/tr_dh.c:284:3: error: ‘DH_compute_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   284 |   rc = DH_compute_key(buf, pub_key, priv_dh);
|       |   ^~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:224:27: note: declared here
|   224 | OSSL_DEPRECATEDIN_3_0 int DH_compute_key(unsigned char *key,
|       |                           ^~~~~~~~~~~~~~
| common/tr_dh.c: In function ‘tr_dh_pub_hash’:
| common/tr_dh.c:303:3: error: ‘DH_get0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   303 |   DH_get0_key(request->tidc_dh, &pub, NULL);
|       |   ^~~~~~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:256:28: note: declared here
|   256 | OSSL_DEPRECATEDIN_3_0 void DH_get0_key(const DH *dh, const BIGNUM **pub_key,
|       |                            ^~~~~~~~~~~
| common/tr_dh.c: In function ‘tr_dh_destroy’:
| common/tr_dh.c:324:3: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
|   324 |   DH_free(dh);
|       |   ^~~~~~~
| In file included from common/tr_dh.c:35:
| /usr/include/openssl/dh.h:200:28: note: declared here
|   200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
|       |                            ^~~~~~~
| cc1: all warnings being treated as errors
| make[2]: *** [Makefile:2849: common/tr_dh.o] Error 1
| make[2]: Leaving directory '/<<PKGBUILDDIR>>'
| make[1]: *** [Makefile:5668: all-recursive] Error 1

For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html

Sebastian
#1006509#14
Date:
2022-05-22 20:04:45 UTC
From:
To:
Dear maintainer,

I've prepared an NMU for moonshot-trust-router (versioned as 3.5.4+1+nmu1)
and uploaded it to DELAYED/2. Please feel free to tell me if I should
cancel it.

cu
Adrian
#1006509#23
Date:
2022-05-22 20:13:57 UTC
From:
To:
    Adrian> Dear maintainer,

    Adrian> I've prepared an NMU for moonshot-trust-router (versioned as
    Adrian> 3.5.4+1+nmu1) and uploaded it to DELAYED/2. Please feel free
    Adrian> to tell me if I should cancel it.

This NMU looks good to me.  Feel free to accelerate it if you like, or
feel free to leave in delayed/2.
#1006509#28
Date:
2022-05-22 20:59:04 UTC
From:
To:
Thanks, rescheduled for immediate upload.

cu
Adrian
#1006509#33
Date:
2022-05-22 21:18:58 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
moonshot-trust-router, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006509@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian Bunk <bunk@debian.org> (supplier of updated moonshot-trust-router package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 22 May 2022 22:44:42 +0300
Source: moonshot-trust-router
Architecture: source
Version: 3.5.4+1+nmu1
Distribution: unstable
Urgency: medium
Maintainer: Sam Hartman <hartmans@debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1006509
Changes:
 moonshot-trust-router (3.5.4+1+nmu1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Don't build with -Werror. (Closes: #1006509)
Checksums-Sha1:
 c8d822782f546e72ec8fe194fe88eefd83cc0607 1923 moonshot-trust-router_3.5.4+1+nmu1.dsc
 cec343f97af45528c74612aa1cbd26fa3fa90266 168892 moonshot-trust-router_3.5.4+1+nmu1.tar.xz
Checksums-Sha256:
 4ccc528b2ba1766c73931b2083ab266641e0d975919b02ec761e4b995837cad2 1923 moonshot-trust-router_3.5.4+1+nmu1.dsc
 8940af2afed29a0e8d7535b37ee86c950002e140749a6d0a724473f46625ce69 168892 moonshot-trust-router_3.5.4+1+nmu1.tar.xz
Files:
 da0542078046605a01652584568094a5 1923 net optional moonshot-trust-router_3.5.4+1+nmu1.dsc
 3c5256a2dbf7d0b5433ee6563304370f 168892 net optional moonshot-trust-router_3.5.4+1+nmu1.tar.xz
-----BEGIN PGP SIGNATURE-----
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=vS2w
-----END PGP SIGNATURE-----