php8.0: Fail to build against OpenSSL 3.0
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
php8.0 (Ubuntu) |
Fix Released
|
High
|
Bryce Harrington | ||
php8.1 (Ubuntu) |
Fix Released
|
High
|
Bryce Harrington |
Bug Description
Hello,
As part of a rebuild against OpenSSL3, this package failed to build on one or
several architectures. You can find the details of the rebuild at
https:/
or for the amd64 failed build, directly at
We're planning to transition to OpenSSL 3.0 for the 22.04 release, and consider
this issue as blocking for this transition.
You can find general migration informations at
https:/
For your tests, you can build against libssl-dev as found in the PPA
schopin/
There are some patches upstream, but they might be incomplete? Notably, the author of the first
PR speaks of failing tests.
https:/
https:/
CVE References
Changed in php8.1 (Ubuntu): | |
status: | Triaged → Fix Committed |
Changed in php8.0 (Ubuntu): | |
assignee: | nobody → Bryce Harrington (bryce) |
importance: | Low → High |
status: | Triaged → Fix Committed |
Changed in php8.1 (Ubuntu): | |
status: | Fix Committed → Fix Released |
The patch for PR 7002 looks like it ought to be sufficient to resolve the build issue with RSA_SSLV23_PADDING macro. It doesn't actually *provide* openssl-3.0 support in php8.0 but at least would be sufficient for your transition.
I am planning to transition to php 8.1 early in 22.04 development[1], and according to these PRs it sounds like these changes already may be included. So, depending on when you plan to do the openssl 3.0 transition, the fixes may already be in place by the time you get to it. (Would be helpful to see the openssl 3.0 transition on the schedule[1]).
[1]: https:/ /discourse. ubuntu. com/t/jj- release- schedule/ 23906