squid: Fail to build against OpenSSL 3.0

Bug #1946205 reported by Simon Chopin
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Squid
Unknown
Unknown
squid (Ubuntu)
Fix Released
High
Sergio Durigan Junior

Bug Description

Hello,

As part of a rebuild against OpenSSL3, this package failed to build on one or
several architectures. You can find the details of the rebuild at

https://people.canonical.com/~schopin/rebuilds/openssl-3.0.0-impish.html

or for the amd64 failed build, directly at

https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22099383/+files/buildlog_ubuntu-impish-amd64.squid_4.13-10ubuntu4.0~ssl3ppa1.1_BUILDING.txt.gz

We're planning to transition to OpenSSL 3.0 for the 22.04 release, and consider
this issue as blocking for this transition.

You can find general migration informations at
https://www.openssl.org/docs/manmaster/man7/migration_guide.html
For your tests, you can build against libssl-dev as found in the PPA
schopin/openssl-3.0.0

There's a draft PR upstream to port squid to OpenSSL 3.0, see
https://github.com/squid-cache/squid/pull/694

Related branches

Paride Legovini (paride)
Changed in squid (Ubuntu):
importance: Undecided → High
Changed in squid (Ubuntu):
assignee: nobody → Sergio Durigan Junior (sergiodj)
status: New → Triaged
tags: added: server-next
Revision history for this message
Simon Chopin (schopin) wrote :

Patch based on the PR linked above, uploaded to both
https://launchpad.net/~schopin/+archive/ubuntu/test-ppa/ (libssl1.1)
and
https://launchpad.net/~schopin/+archive/ubuntu/foundation-openssl3/ (libssl3)

The autopkgtests fail currently because of https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1951476

Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

Yeah, I'm still testing the upstream patch. They asked for more testers/reviewers and I intend to provide some feedback there, but we're unfortunately blocked on the apache2 bug (which is preventing us from running autopkgtest).

tags: added: patch
tags: added: update-excuse update-excuses
Robie Basak (racb)
Changed in squid (Ubuntu):
milestone: none → ubuntu-22.04-feature-freeze
Changed in squid (Ubuntu):
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package squid - 5.2-1ubuntu3

---------------
squid (5.2-1ubuntu3) jammy; urgency=medium

  * Fix FTBFS with OpenSSL 3.0 (LP: #1946205). The following new
    patches have been added:
    - d/p/openssl3-Declaration-of-CRYPTO_EX_dup-changed-again-in-3.0.patch.
    - d/p/openssl3-Detect-and-default-enable-OpenSSL-3.patch.
    - d/p/openssl3-Fix-EVP_PKEY_get0_RSA-is-deprecated.patch.
    - d/p/openssl3-Initial-DH-conversion-to-EVP_PKEY.patch.
    - d/p/openssl3-Refactor-Ssl-createSslPrivateKey.patch.
    - d/p/openssl3-Remove-stale-TODO-and-comment.patch.
    - d/p/openssl3-SSL_OP_-macro-definitions-changed-in-3.0.patch.
    - d/p/openssl3-Switch-to-BN_rand.patch.
    - d/p/openssl3-TODO-Upgrade-API-calls-verifying-loaded-DH-params-fi.patch.
    - d/p/openssl3-Tweak-RSA-key-generator.patch.
    - d/p/openssl3-Update-ECDH-key-settings.patch.
    - d/p/openssl3-Update-license-disclaimer.patch.

 -- Sergio Durigan Junior <email address hidden> Tue, 08 Feb 2022 17:15:20 -0500

Changed in squid (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.