[Bug 2045256] [NEW] transition the code to OpenSSL 3.x

[Vlad]

Public bug reported:

When building the current version with OpenSSL 3.0.2 on Ubuntu 22.04.3
LTS, the build fails with bunch of errors due to deprecated OpenSSL APIs
used, such as

ENGINE_load_builtin_engines
ENGINE_by_id
ENGINE_init
ENGINE_load_private_key
ENGINE_finish
ENGINE_free
SHA256_Init
SHA256_Update
SHA256_Final
...

etc.


The failure happened because -Werror is used for the build. Can be suppressed with -Wno-deprecated-declarations however the OpenSSL 3.x API transition would be good to do anyway.

The direct access to low level SHA256 APIs can be replaced with EVP
APIs. The ENGINE APIs were deprecated in favor of the PROVIDER model in
OpenSSL 3.x so might be a bit of work.

** Affects: sbsigntool (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sbsigntool in Ubuntu.
https://bugs.launchpad.net/bugs/2045256

Title:
  transition the code to OpenSSL 3.x

Status in sbsigntool package in Ubuntu:
  New

Bug description:
  When building the current version with OpenSSL 3.0.2 on Ubuntu 22.04.3
  LTS, the build fails with bunch of errors due to deprecated OpenSSL
  APIs used, such as

  ENGINE_load_builtin_engines
  ENGINE_by_id
  ENGINE_init
  ENGINE_load_private_key
  ENGINE_finish
  ENGINE_free
  SHA256_Init
  SHA256_Update
  SHA256_Final
  ...

  etc.

  
  The failure happened because -Werror is used for the build. Can be suppressed with -Wno-deprecated-declarations however the OpenSSL 3.x API transition would be good to do anyway.

  The direct access to low level SHA256 APIs can be replaced with EVP
  APIs. The ENGINE APIs were deprecated in favor of the PROVIDER model
  in OpenSSL 3.x so might be a bit of work.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/2045256/+subscriptions