[LU-15896] gss/sk_utils.c error: 'DH_check' is deprecated: Since OpenSSL 3.0

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0, Lustre 2.15.2
• Labels: ubuntu
• Assignee: Sebastien Buisson
• Reporter: Jian Yu

Description

While building gss/sk_utils.c with OpenSSL 3.0.x and gcc 11 on Ubuntu 22.04, it failed with the following errors:

gss/sk_utils.c: In function 'sk_is_dh_valid':
gss/sk_utils.c:714:17: error: 'DH_check' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  714 |                 rc = DH_check(dh, &codes);
      |                 ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:220:27: note: declared here
  220 | OSSL_DEPRECATEDIN_3_0 int DH_check(const DH *dh, int *codes);
      |                           ^~~~~~~~
gss/sk_utils.c:723:9: error: 'DH_get0_pqg' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  723 |         DH_get0_pqg(dh, &p, NULL, &g);
      |         ^~~~~~~~~~~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:253:28: note: declared here
  253 | OSSL_DEPRECATEDIN_3_0 void DH_get0_pqg(const DH *dh, const BIGNUM **p,
      |                            ^~~~~~~~~~~
gss/sk_utils.c:747:9: error: 'BN_is_prime_ex' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  747 |         rc = BN_is_prime_ex(p, num_rounds, ctx, NULL);
      |         ^~
In file included from /usr/include/openssl/asn1.h:33,
                 from /usr/include/openssl/dh.h:85,
                 from gss/sk_utils.c:36:
/usr/include/openssl/bn.h:373:5: note: declared here
  373 | int BN_is_prime_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx, BN_GENCB *cb);
      |     ^~~~~~~~~~~~~~
gss/sk_utils.c:759:9: error: 'BN_is_prime_ex' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  759 |         rc = BN_is_prime_ex(r, num_rounds, ctx, NULL);
      |         ^~
In file included from /usr/include/openssl/asn1.h:33,
                 from /usr/include/openssl/dh.h:85,
                 from gss/sk_utils.c:36:
/usr/include/openssl/bn.h:373:5: note: declared here
  373 | int BN_is_prime_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx, BN_GENCB *cb);
      |     ^~~~~~~~~~~~~~
gss/sk_utils.c: In function 'sk_speedtest_dh_valid':
gss/sk_utils.c:809:9: error: 'DH_new' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  809 |         dh = DH_new();
      |         ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:199:27: note: declared here
  199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
      |                           ^~~~~~
gss/sk_utils.c:825:9: error: 'DH_set0_pqg' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  825 |         if (!DH_set0_pqg(dh, p, NULL, g)) {
      |         ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:255:27: note: declared here
  255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
      |                           ^~~~~~~~~~~
gss/sk_utils.c:873:9: error: 'DH_free' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  873 |         DH_free(dh);
      |         ^~~~~~~
<~snip~>

https://build.whamcloud.com/view/all/job/sandbox/1/arch=x86_64,build_type=client,distro=ubuntu2204,ib_stack=inkernel/consoleFull

# gcc --version
gcc (Ubuntu 11.2.0-19ubuntu1) 11.2.0

# openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

Issue Links

• is related to: LU-15781 Ubuntu 22.04 LTS release support

Comments

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/48184/
Subject: LU-15896 gss: support OpenSSLv3
Project: fs/lustre-release
Branch: b2_15
Current Patch Set:
Commit: 8843418a5e8acd86d112327862524ff6f900c3fa

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/48184
Subject: LU-15896 gss: support OpenSSLv3
Project: fs/lustre-release
Branch: b2_15
Current Patch Set: 1
Commit: 41fa4f5a871989a189a90130d9811e164204f58d

[Peter Jones]

Landed for 2.16

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/47717/
Subject: LU-15896 gss: support OpenSSLv3
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 615691a531a80b75c4dd054dbb86d0bdbf4cf808

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/47739/
Subject: LU-15896 gss: ignore OpenSSLv3 deprecated API
Project: fs/lustre-release
Branch: b2_15
Current Patch Set:
Commit: c5e282e51df4c8e99d35e7e17d5107f5aa0aafaa

[Gerrit Updater]

"Jian Yu <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/47739
Subject: LU-15896 gss: ignore OpenSSLv3 deprecated API
Project: fs/lustre-release
Branch: b2_15
Current Patch Set: 1
Commit: 254f1102c86347b7e9337c469df192f0d436b639

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/47717
Subject: LU-15896 gss: support OpenSSLv3
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 37c901e794f7cdd814436244ac68e93b8b3aea0b

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/47485/
Subject: LU-15896 gss: ignore OpenSSLv3 deprecated API
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: ee60c14360839ab9955ff968d082dfdc269c05bf

[Jian Yu]

It works. Thank you, sebastien.

[Sebastien Buisson]

Hi yujian can you please give a try to https://review.whamcloud.com/47485 ?