[Bug 2045256] Re: transition the code to OpenSSL 3.x

[Dimitri John Ledkov]

please note the Werror packaging change was done in Kinetic release (or
maybe earlier), thus from Ubuntu point of view this is fixed released.

If you really need improved sbsigntool upgrade to a newer Ubuntu
release. Backporting this change to jammy is outside of the Ubuntu
Stable Release Updates policy.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sbsigntool in Ubuntu.
https://bugs.launchpad.net/bugs/2045256

Title:
  transition the code to OpenSSL 3.x

Status in sbsigntool package in Ubuntu:
  Fix Released

Bug description:
  When building the current version with OpenSSL 3.0.2 on Ubuntu 22.04.3
  LTS, the build fails with bunch of errors due to deprecated OpenSSL
  APIs used, such as

  ENGINE_load_builtin_engines
  ENGINE_by_id
  ENGINE_init
  ENGINE_load_private_key
  ENGINE_finish
  ENGINE_free
  SHA256_Init
  SHA256_Update
  SHA256_Final
  ...

  etc.

  
  The failure happened because -Werror is used for the build. Can be suppressed with -Wno-deprecated-declarations however the OpenSSL 3.x API transition would be good to do anyway.

  The direct access to low level SHA256 APIs can be replaced with EVP
  APIs. The ENGINE APIs were deprecated in favor of the PROVIDER model
  in OpenSSL 3.x so might be a bit of work.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/2045256/+subscriptions