[Pkg-freeipa-devel] Bug#1001311: Bug#1001311: certmonger: FTBFS with openssl 3

[Timo Aaltonen]

On 8.12.2021 9.09, Steve Langasek wrote:
> Source: certmonger
> Version: 0.79.14+git20211010-2
> Severity: serious
> Tags: experimental
> User: ubuntu-devel at lists.ubuntu.com
> Usertags: origin-ubuntu jammy
> 
> Hi Timo,
> 
> certmonger FTBFS against openssl 3 with an undefined symbol error:
> 
> [...]
> gcc   -I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include -isystem /usr/include/mit-krb5   -I/usr/include/uuid -g -O2 -ffile-prefix-map=/<<BUILDDIR>>/certmonger-0.79.14+git20211010=. -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra  -I/usr/include/libxml2 -I/usr/include/nss -I/usr/include/nspr -I/usr/include/x86_64-linux-gnu -g -O2 -ffile-prefix-map=/<<BUILDDIR>>/certmonger-0.79.14+git20211010=. -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -Wall -Wextra -fPIC  -fPIC -pie -Wl,-z,relro,-z,now -o scep-submit scep_submit-scep.o scep_submit-submit-h.o scep_submit-util-m.o scep_submit-util-o.o scep_submit-submit-u.o scep_submit-util.o scep_submit-log.o scep_submit-pkcs7.o scep_submit-store-gen.o scep_submit-tm.o scep_submit-prefs.o scep_submit-prefs-o.o scep_submit-scep-o.o scep_submit-env-system.o -lcurl -lxml2 -lnss3 -lnssutil3 -lsmime3 -lssl3 -lplds4 -lplc4 -lnspr4 -lcrypto -ltalloc  -luuid  -lpopt
> ../../src/submit-h.c: In function ‘cm_submit_h_run’:
> ../../src/submit-h.c:257:17: warning: call to ‘_curl_easy_setopt_err_write_callback’ declared with attribute warning: curl_easy_setopt expects a curl_write_callback argument for this option [-Wattribute-warning]
>    257 |                 curl_easy_setopt(ctx->curl, CURLOPT_WRITEFUNCTION,
>        |                 ^
> /usr/bin/ld: /tmp/ccPXkLF2.ltrans0.ltrans.o: in function `main':
> ./build/src/../../src/util-o.c:54: undefined reference to `OPENSSL_init_ssl'
> collect2: error: ld returned 1 exit status
> [...]
> 
>    (https://launchpad.net/ubuntu/+source/certmonger/0.79.14+git20211010-2/+build/22293176)
> 
> openssl 3 is currently in experimental, and is expected to ship with the
> next version of Debian.  It is also the version of openssl to be used for
> the upcoming Ubuntu 22.04 LTS release.

Hi,

Yeah looks like upstream was lazy and never pushed a bunch of fixes from 
the Fedora package to upstream git, but I've poked them about this and 
should get a new release soon.


-- 
t