Bug#996272: crda: FTBFS with OpenSSL 3.0

[Kurt Roeckx <kurt@roeckx.be>]

Source: crda
Version: 4.14+git20191112.9856751-1
Severity: important
Tags: bookworm sid
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: ftbfs-3.0

Hi,

Your package is failing to build using OpenSSL 3.0 with the
following error:
reglib.c: In function reglib_verify_db_signature:
reglib.c:122:5: error: PEM_read_RSA_PUBKEY is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  122 |     rsa = PEM_read_RSA_PUBKEY(keyfile,
      |     ^~~
In file included from reglib.c:24:
/usr/include/openssl/pem.h:449:1: note: declared here
  449 | DECLARE_PEM_rw_attr(OSSL_DEPRECATEDIN_3_0, RSA_PUBKEY, RSA)
      | ^~~~~~~~~~~~~~~~~~~
reglib.c:125:6: error: RSA_verify is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  125 |      ok = RSA_verify(NID_sha1, hash, SHA_DIGEST_LENGTH,
      |      ^~
In file included from reglib.c:22:
/usr/include/openssl/rsa.h:351:27: note: declared here
  351 | OSSL_DEPRECATEDIN_3_0 int RSA_verify(int type, const unsigned char *m,
      |                           ^~~~~~~~~~
reglib.c:127:5: error: RSA_free is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  127 |     RSA_free(rsa);
      |     ^~~~~~~~
In file included from reglib.c:22:
/usr/include/openssl/rsa.h:293:28: note: declared here
  293 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
      |                            ^~~~~~~~
cc1: all warnings being treated as errors

The short term solution is to drop the -Werror. Longer term the
functions need to get replaced with non-deprecated versions.

For more information see:
https://www.openssl.org/docs/man3.0/man7/migration_guide.html


Kurt