-
Notifications
You must be signed in to change notification settings - Fork 251
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build with OpenSSL 1.1 is broken #7735
base: master
Are you sure you want to change the base?
Conversation
src/util/cert/libcrypto/cert.c
Outdated
@@ -406,16 +416,16 @@ static int sss_rsa_get_key(const EVP_PKEY *cert_pub_key, | |||
|
|||
RSA_get0_key(rsa_pub_key, tmp_n, tmp_e, NULL); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi,
I'm sorry for all the typos, I was under the assumption the one of the CI systems is still using OpenSSL-1.1 so I assumed that everything was fine if all CI builds succeeded.
In the patch for sssd-2-9 you have + RSA_get0_key(rsa_pub_key, &tmp_n, &tmp_e, NULL);
and it looks like I need this for master too, to not get incompatible-pointer-types
warnings.
bye,
Sumit
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mastersin, ping
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry, it looks like my merge mistake. I fixed it and pushed with force.
Thank you, ACK. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi,
I'm sorry, there is still a typo, line 246/252 should be
if (ec_group == NULL) {
instead of
if (*_ec_group == NULL) {
This has to be fixed in the sssd-2-10 version of this patch as well.
bye,
Sumit
Don't include <openssl/core_names.h> header if OpenSSL older 3.0 is used. Fix compile typos for build with OpenSSL 1.1.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi,
thank you for the update, SSSD now build with older OpenSSL and tests are passing, ACK.
bye,
Sumit
cert util: add support build with OpenSSL older than 3.0: