Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
(sorry for filing against the MDEV project - I don't see any "Galera" project on Jira)
Most Linux distros have already imported OpenSSL 4.0, including Debian and Ubuntu. With this I noticed that Galera does not build but fails on:
[ 43%] Building CXX object gcomm/src/CMakeFiles/gcomm.dir/gmcast.cpp.o
|
cd /debcraft/source/obj-x86_64-linux-gnu/gcomm/src && /usr/lib/ccache/x86_64-linux-gnu-g++ -DBOOST_BIND_GLOBAL_PLACEHOLDERS=1 -DBOOST_DATE_TIME_POSIX_TIME_STD_CONFIG=1 -DGALERA_HAVE_SSL -DGALERA_LOG_H_ENABLE_CXX -DHAVE_ASIO_HPP -DHAVE_BOOST_SHARED_PTR_HPP -DHAVE_BYTESWAP_H -DHAVE_COMMON_H -DHAVE_ENDIAN_H -DHAVE_STD_ARRAY -DHAVE_STD_UNORDERED_MAP -DNDEBUG -DOPENSSL_HAS_SET_ECDH_AUTO -D_XOPEN_SOURCE=600 -I/debcraft/source -I/debcraft/source/common -I/debcraft/source/galera/src -I/debcraft/source/galerautils/src -I/debcraft/source/gcache/src -I/debcraft/source/gcomm/src -I/debcraft/source/gcs/src -I/debcraft/source/wsrep/src -Wall -Wextra -g -O2 -Woverloaded-virtual -g -O2 -ffile-prefix-map=/debcraft/source=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++11 -fPIC -fdiagnostics-color=always -Wno-unused-parameter -Wno-conversion -Wno-overloaded-virtual -MD -MT gcomm/src/CMakeFiles/gcomm.dir/gmcast.cpp.o -MF CMakeFiles/gcomm.dir/gmcast.cpp.o.d -o CMakeFiles/gcomm.dir/gmcast.cpp.o -c /debcraft/source/gcomm/src/gmcast.cpp
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp: In function 'X509* create_x509(EVP_PKEY*, X509*, const char*, bool)':
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1244:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1244 | X509_NAME_add_entry_by_txt(name, "C", MBSTRING_ASC, C_str, -1, -1, 0);
|
| ^~~~
|
| |
|
| const X509_name_st*
|
In file included from /usr/include/openssl/pem.h:23,
|
from /debcraft/source/galerautils/tests/gu_asio_test.cpp:1063:
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1245:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1245 | X509_NAME_add_entry_by_txt(name, "ST", MBSTRING_ASC, ST_str, -1, -1, 0);
|
| ^~~~
|
| |
|
| const X509_name_st*
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1246:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1246 | X509_NAME_add_entry_by_txt(name, "L", MBSTRING_ASC, L_str, -1, -1, 0);
|
| ^~~~
|
| |
|
| const X509_name_st*
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1247:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1247 | X509_NAME_add_entry_by_txt(name, "O", MBSTRING_ASC, O_str, -1, -1, 0);
|
| ^~~~
|
| |
|
| const X509_name_st*
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1248:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1248 | X509_NAME_add_entry_by_txt(name, "OU", MBSTRING_ASC, OU_str, -1, -1, 0);
|
| ^~~~
|
| |
|
| const X509_name_st*
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
/debcraft/source/galerautils/tests/gu_asio_test.cpp:1249:32: error: invalid conversion from 'const X509_name_st*' to 'X509_NAME*' {aka 'X509_name_st*'} [-fpermissive]
|
1249 | X509_NAME_add_entry_by_txt(name, "CN", MBSTRING_ASC,
|
| ^~~~
|
| |
|
| const X509_name_st*
|
/usr/include/openssl/x509.h:1072:43: note: initializing argument 1 of 'int X509_NAME_add_entry_by_txt(X509_NAME*, const char*, int, const unsigned char*, int, int, int)'
|
1072 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
| ~~~~~~~~~~~^~~~
|
make[3]: *** [galerautils/tests/CMakeFiles/gu_tests++.dir/build.make:334: galerautils/tests/CMakeFiles/gu_tests++.dir/gu_asio_test.cpp.o] Error 1
|
make[3]: *** Waiting for unfinished jobs....
|
This is tracked in Debian as https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138418
Based on the fact that https://github.com/MariaDB/server/pull/5186 and https://github.com/MariaDB/server/pull/5029 are still open and haven't received any attention it seems MariaDB CI does not yet include OpenSSL 4.0. Now would be a good time to introduce it.
Attachments
Issue Links
- relates to
-
MDEV-39509 cryptographic functions broken (OpenSSL 4.0)
-
- Open
-