Bug 2010601 - ldns-1.7.1-9.fc36 FTBFS with OpenSSL 3: dnssec_sign.c:420:26: error: 'key' undeclared
Summary: ldns-1.7.1-9.fc36 FTBFS with OpenSSL 3: dnssec_sign.c:420:26: error: 'key' un...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: ldns
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Richard Lescak
QA Contact: Fedora Extras Quality Assurance
URL: https://koschei.fedoraproject.org/pac...
Whiteboard:
Depends On:
Blocks: F36FTBFS
TreeView+ depends on / blocked
 
Reported: 2021-10-05 07:00 UTC by Petr Pisar
Modified: 2021-10-14 09:41 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-10-14 09:41:39 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Petr Pisar 2021-10-05 07:00:11 UTC
ldns-1.7.1-9.fc36 fails to build in Fedora 36:

./libtool --tag=CC --quiet --mode=compile gcc -I. -I.  -DHAVE_CONFIG_H -DLDNS_TRUST_ANCHOR_FILE="\"/var/lib/unbound/root.key\"" -Wunused-fu
nction -Wstrict-prototypes -Wwrite-strings -W -Wall -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wer
ror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-stro
ng -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64  -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectio
n -fPIC -fno-strict-aliasing  -c ./dnssec_sign.c -o dnssec_sign.lo
./dnssec_sign.c: In function 'ldns_sign_public_dsa':
./dnssec_sign.c:361:9: warning: 'DSA_do_sign' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
  361 |         sig = DSA_do_sign(sha1_hash, SHA_DIGEST_LENGTH, key);
      |         ^~~
In file included from /usr/include/openssl/x509.h:37,
                 from /usr/include/openssl/ssl.h:31,
                 from ./ldns/dane.h:30,
                 from ./ldns/ldns.h:98,
                 from ./dnssec_sign.c:3:
/usr/include/openssl/dsa.h:113:32: note: declared here
  113 | OSSL_DEPRECATEDIN_3_0 DSA_SIG *DSA_do_sign(const unsigned char *dgst, int dlen,
      |                                ^~~~~~~~~~~
./dnssec_sign.c: In function 'ldns_pkey_is_ecdsa':
./dnssec_sign.c:420:26: error: 'key' undeclared (first use in this function); did you mean 'pkey'?
  420 |         if(EVP_PKEY_type(key->type) != EVP_PKEY_EC)
      |                          ^~~
      |                          pkey

A difference between a passing and failing buildroot can be found at <https://koschei.fedoraproject.org/build/11220597>. An upgrade of openssl-devel from 1:1.1.1k-2.fc35 to 1:3.0.0-1.fc36 looks suspicious.


Note You need to log in before you can comment on or make changes to this bug.