Bug#1006580: xrdp: FTBFS with OpenSSL 3.0
Source: xrdp
Version: 0.9.17-2
Severity: important
Tags: bookworm sid
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: ftbfs-3.0
Your package is failing to build using OpenSSL 3.0 with the
following error:
| libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -DXRDP_CFG_PATH=\"/etc/xrdp\" -DXRDP_SBIN_PATH=\"/usr/sbin\" -DXRDP_SHARE_PATH=\"/usr/share/xrdp\" -DXRDP_PID_PATH=\"/var/run/xrdp\" -DXRDP_LOG_PATH=\"/var/log\" -DXRDP_SOCKET_PATH=\"/run/xrdp/sockdir\" -include config_ac.h -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wwrite-strings -Werror -c ssl_calls.c -fPIC -DPIC -o .libs/ssl_calls.o
| ssl_calls.c: In function ‘ssl_rc4_set_key’:
| ssl_calls.c:145:5: error: ‘RC4_set_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 145 | RC4_set_key((RC4_KEY *)rc4_info, len, (tui8 *)key);
| | ^~~~~~~~~~~
| In file included from ssl_calls.c:29:
| /usr/include/openssl/rc4.h:35:28: note: declared here
| 35 | OSSL_DEPRECATEDIN_3_0 void RC4_set_key(RC4_KEY *key, int len,
| | ^~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_rc4_crypt’:
| ssl_calls.c:152:5: error: ‘RC4’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 152 | RC4((RC4_KEY *)rc4_info, len, (tui8 *)data, (tui8 *)data);
| | ^~~
| In file included from ssl_calls.c:29:
| /usr/include/openssl/rc4.h:37:28: note: declared here
| 37 | OSSL_DEPRECATEDIN_3_0 void RC4(RC4_KEY *key, size_t len,
| | ^~~
| ssl_calls.c: In function ‘ssl_sha1_clear’:
| ssl_calls.c:175:5: error: ‘SHA1_Init’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 175 | SHA1_Init((SHA_CTX *)sha1_info);
| | ^~~~~~~~~
| In file included from /usr/include/openssl/x509.h:41,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/sha.h:49:27: note: declared here
| 49 | OSSL_DEPRECATEDIN_3_0 int SHA1_Init(SHA_CTX *c);
| | ^~~~~~~~~
| ssl_calls.c: In function ‘ssl_sha1_transform’:
| ssl_calls.c:182:5: error: ‘SHA1_Update’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 182 | SHA1_Update((SHA_CTX *)sha1_info, data, len);
| | ^~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:41,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/sha.h:50:27: note: declared here
| 50 | OSSL_DEPRECATEDIN_3_0 int SHA1_Update(SHA_CTX *c, const void *data, size_t len);
| | ^~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_sha1_complete’:
| ssl_calls.c:189:5: error: ‘SHA1_Final’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 189 | SHA1_Final((tui8 *)data, (SHA_CTX *)sha1_info);
| | ^~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:41,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/sha.h:51:27: note: declared here
| 51 | OSSL_DEPRECATEDIN_3_0 int SHA1_Final(unsigned char *md, SHA_CTX *c);
| | ^~~~~~~~~~
| ssl_calls.c: In function ‘ssl_md5_clear’:
| ssl_calls.c:212:5: error: ‘MD5_Init’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 212 | MD5_Init((MD5_CTX *)md5_info);
| | ^~~~~~~~
| In file included from ssl_calls.c:30:
| /usr/include/openssl/md5.h:49:27: note: declared here
| 49 | OSSL_DEPRECATEDIN_3_0 int MD5_Init(MD5_CTX *c);
| | ^~~~~~~~
| ssl_calls.c: In function ‘ssl_md5_transform’:
| ssl_calls.c:219:5: error: ‘MD5_Update’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 219 | MD5_Update((MD5_CTX *)md5_info, data, len);
| | ^~~~~~~~~~
| In file included from ssl_calls.c:30:
| /usr/include/openssl/md5.h:50:27: note: declared here
| 50 | OSSL_DEPRECATEDIN_3_0 int MD5_Update(MD5_CTX *c, const void *data, size_t len);
| | ^~~~~~~~~~
| ssl_calls.c: In function ‘ssl_md5_complete’:
| sl_calls.c:226:5: error: ‘MD5_Final’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 226 | MD5_Final((tui8 *)data, (MD5_CTX *)md5_info);
| | ^~~~~~~~~
| In file included from ssl_calls.c:30:
| /usr/include/openssl/md5.h:51:27: note: declared here
| 51 | OSSL_DEPRECATEDIN_3_0 int MD5_Final(unsigned char *md, MD5_CTX *c);
| | ^~~~~~~~~
| ssl_calls.c: In function ‘ssl_hmac_info_create’:
| ssl_calls.c:316:5: error: ‘HMAC_CTX_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 316 | hmac_ctx = HMAC_CTX_new();
| | ^~~~~~~~
| In file included from /usr/include/openssl/ssl.h:37,
| from ssl_calls.c:27:
| /usr/include/openssl/hmac.h:33:33: note: declared here
| 33 | OSSL_DEPRECATEDIN_3_0 HMAC_CTX *HMAC_CTX_new(void);
| | ^~~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_hmac_info_delete’:
| ssl_calls.c:329:9: error: ‘HMAC_CTX_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 329 | HMAC_CTX_free(hmac_ctx);
| | ^~~~~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:37,
| from ssl_calls.c:27:
| /usr/include/openssl/hmac.h:35:28: note: declared here
| 35 | OSSL_DEPRECATEDIN_3_0 void HMAC_CTX_free(HMAC_CTX *ctx);
| | ^~~~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_hmac_sha1_init’:
| ssl_calls.c:340:5: error: ‘HMAC_Init_ex’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 340 | HMAC_Init_ex(hmac_ctx, data, len, EVP_sha1(), NULL);
| | ^~~~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:37,
| from ssl_calls.c:27:
| /usr/include/openssl/hmac.h:43:27: note: declared here
| 43 | OSSL_DEPRECATEDIN_3_0 int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len,
| | ^~~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_hmac_transform’:
| ssl_calls.c:352:5: error: ‘HMAC_Update’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 352 | HMAC_Update(hmac_ctx, ldata, len);
| | ^~~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:37,
| from ssl_calls.c:27:
| /usr/include/openssl/hmac.h:45:27: note: declared here
| 45 | OSSL_DEPRECATEDIN_3_0 int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data,
| | ^~~~~~~~~~~
| ssl_calls.c: In function ‘ssl_hmac_complete’:
| ssl_calls.c:366:5: error: ‘HMAC_Final’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 366 | HMAC_Final(hmac_ctx, ldata, &llen);
| | ^~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:37,
| from ssl_calls.c:27:
| /usr/include/openssl/hmac.h:47:27: note: declared here
| 47 | OSSL_DEPRECATEDIN_3_0 int HMAC_Final(HMAC_CTX *ctx, unsigned char *md,
| | ^~~~~~~~~~
| ssl_calls.c: In function ‘ssl_gen_key_xrdp1’:
| ssl_calls.c:480:5: error: ‘RSA_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 480 | my_key = RSA_new();
| | ^~~~~~
| In file included from /usr/include/openssl/x509.h:36,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/rsa.h:201:28: note: declared here
| 201 | OSSL_DEPRECATEDIN_3_0 RSA *RSA_new(void);
| | ^~~~~~~
| ssl_calls.c:481:5: error: ‘RSA_generate_key_ex’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 481 | error = RSA_generate_key_ex(my_key, key_size_in_bits, my_e, 0) == 0;
| | ^~~~~
| In file included from /usr/include/openssl/x509.h:36,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/rsa.h:260:27: note: declared here
| 260 | OSSL_DEPRECATEDIN_3_0 int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e,
| | ^~~~~~~~~~~~~~~~~~~
| ssl_calls.c:485:5: error: ‘RSA_get0_key’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 485 | RSA_get0_key(my_key, &n, NULL, &d);
| | ^~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:36,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/rsa.h:217:28: note: declared here
| 217 | OSSL_DEPRECATEDIN_3_0 void RSA_get0_key(const RSA *r,
| | ^~~~~~~~~~~~
| ssl_calls.c:520:5: error: ‘RSA_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 520 | RSA_free(my_key);
| | ^~~~~~~~
| In file included from /usr/include/openssl/x509.h:36,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/rsa.h:293:28: note: declared here
| 293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
| | ^~~~~~~~
| ssl_calls.c: In function ‘ssl_get_dh2236’:
| ssl_calls.c:567:5: error: ‘DH_new’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 567 | DH *dh = DH_new();
| | ^~
| In file included from /usr/include/openssl/dsa.h:51,
| from /usr/include/openssl/x509.h:37,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/dh.h:199:27: note: declared here
| 199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
| | ^~~~~~
| ssl_calls.c:579:9: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 579 | DH_free(dh);
| | ^~~~~~~
| In file included from /usr/include/openssl/dsa.h:51,
| from /usr/include/openssl/x509.h:37,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/dh.h:200:28: note: declared here
| 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
| | ^~~~~~~
| ssl_calls.c:584:5: error: ‘DH_set0_pqg’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 584 | if (0 == DH_set0_pqg(dh, p, NULL, g))
| | ^~
| In file included from /usr/include/openssl/dsa.h:51,
| from /usr/include/openssl/x509.h:37,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/dh.h:255:27: note: declared here
| 255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
| | ^~~~~~~~~~~
| ssl_calls.c:588:9: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 588 | DH_free(dh);
| | ^~~~~~~
| In file included from /usr/include/openssl/dsa.h:51,
| from /usr/include/openssl/x509.h:37,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/dh.h:200:28: note: declared here
| 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
| | ^~~~~~~
| ssl_calls.c: In function ‘ssl_tls_accept’:
| ssl_calls.c:768:5: error: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
| 768 | DH_free(dh); // ok to free, copied into ctx by SSL_CTX_set_tmp_dh()
| | ^~~~~~~
| In file included from /usr/include/openssl/dsa.h:51,
| from /usr/include/openssl/x509.h:37,
| from /usr/include/openssl/ssl.h:31,
| from ssl_calls.c:27:
| /usr/include/openssl/dh.h:200:28: note: declared here
| 200 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
| | ^~~~~~~
| cc1: all warnings being treated as errors
| make[3]: *** [Makefile:564: ssl_calls.lo] Error 1
| make[3]: Leaving directory '/<<PKGBUILDDIR>>/common'
| make[2]: *** [Makefile:487: all-recursive] Error 1
| make[2]: Leaving directory '/<<PKGBUILDDIR>>'
| make[1]: *** [Makefile:419: all] Error 2
| make[1]: Leaving directory '/<<PKGBUILDDIR>>'
For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html
Sebastian
Reply to: