[LU-15896] gss/sk_utils.c error: 'DH_check' is deprecated: Since OpenSSL 3.0

• Type: Improvement
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0, Lustre 2.15.2
• Labels: ubuntu
• Assignee: Sebastien Buisson
• Reporter: Jian Yu

Description

While building gss/sk_utils.c with OpenSSL 3.0.x and gcc 11 on Ubuntu 22.04, it failed with the following errors:

gss/sk_utils.c: In function 'sk_is_dh_valid':
gss/sk_utils.c:714:17: error: 'DH_check' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  714 |                 rc = DH_check(dh, &codes);
      |                 ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:220:27: note: declared here
  220 | OSSL_DEPRECATEDIN_3_0 int DH_check(const DH *dh, int *codes);
      |                           ^~~~~~~~
gss/sk_utils.c:723:9: error: 'DH_get0_pqg' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  723 |         DH_get0_pqg(dh, &p, NULL, &g);
      |         ^~~~~~~~~~~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:253:28: note: declared here
  253 | OSSL_DEPRECATEDIN_3_0 void DH_get0_pqg(const DH *dh, const BIGNUM **p,
      |                            ^~~~~~~~~~~
gss/sk_utils.c:747:9: error: 'BN_is_prime_ex' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  747 |         rc = BN_is_prime_ex(p, num_rounds, ctx, NULL);
      |         ^~
In file included from /usr/include/openssl/asn1.h:33,
                 from /usr/include/openssl/dh.h:85,
                 from gss/sk_utils.c:36:
/usr/include/openssl/bn.h:373:5: note: declared here
  373 | int BN_is_prime_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx, BN_GENCB *cb);
      |     ^~~~~~~~~~~~~~
gss/sk_utils.c:759:9: error: 'BN_is_prime_ex' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  759 |         rc = BN_is_prime_ex(r, num_rounds, ctx, NULL);
      |         ^~
In file included from /usr/include/openssl/asn1.h:33,
                 from /usr/include/openssl/dh.h:85,
                 from gss/sk_utils.c:36:
/usr/include/openssl/bn.h:373:5: note: declared here
  373 | int BN_is_prime_ex(const BIGNUM *p, int nchecks, BN_CTX *ctx, BN_GENCB *cb);
      |     ^~~~~~~~~~~~~~
gss/sk_utils.c: In function 'sk_speedtest_dh_valid':
gss/sk_utils.c:809:9: error: 'DH_new' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  809 |         dh = DH_new();
      |         ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:199:27: note: declared here
  199 | OSSL_DEPRECATEDIN_3_0 DH *DH_new(void);
      |                           ^~~~~~
gss/sk_utils.c:825:9: error: 'DH_set0_pqg' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  825 |         if (!DH_set0_pqg(dh, p, NULL, g)) {
      |         ^~
In file included from gss/sk_utils.c:36:
/usr/include/openssl/dh.h:255:27: note: declared here
  255 | OSSL_DEPRECATEDIN_3_0 int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
      |                           ^~~~~~~~~~~
gss/sk_utils.c:873:9: error: 'DH_free' is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  873 |         DH_free(dh);
      |         ^~~~~~~
<~snip~>

https://build.whamcloud.com/view/all/job/sandbox/1/arch=x86_64,build_type=client,distro=ubuntu2204,ib_stack=inkernel/consoleFull

# gcc --version
gcc (Ubuntu 11.2.0-19ubuntu1) 11.2.0

# openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)

Issue Links

• is related to: LU-15781 Ubuntu 22.04 LTS release support