Ubuntu
squid package

squid: Fail to build against OpenSSL 3.0

Bug #1946205 reported by Simon Chopin on 2021-10-06

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	Squid	Unknown	Unknown	squid-bugs #5133
	squid (Ubuntu)	Fix Released	High	Sergio Durigan Junior	Ubuntu ubuntu-22.04-feature-freeze

Bug Description

Hello,

As part of a rebuild against OpenSSL3, this package failed to build on one or
several architectures. You can find the details of the rebuild at

https://people.canonical.com/~schopin/rebuilds/openssl-3.0.0-impish.html

or for the amd64 failed build, directly at

https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22099383/+files/buildlog_ubuntu-impish-amd64.squid_4.13-10ubuntu4.0~ssl3ppa1.1_BUILDING.txt.gz

We're planning to transition to OpenSSL 3.0 for the 22.04 release, and consider
this issue as blocking for this transition.

You can find general migration informations at
https://www.openssl.org/docs/manmaster/man7/migration_guide.html
For your tests, you can build against libssl-dev as found in the PPA
schopin/openssl-3.0.0

There's a draft PR upstream to port squid to OpenSSL 3.0, see
https://github.com/squid-cache/squid/pull/694

Tags:

Related branches

~sergiodj/ubuntu/+source/squid:merge-5.6-1-kinetic

Merged into ubuntu/+source/squid:debian/sid at revision caf7e094d6fb550a059dd6a7656ae819c0246259

Christian Ehrhardt  (community): Needs Fixing on 2022-08-11

Canonical Server Reporter: Pending requested 2022-08-10

~sergiodj/ubuntu/+source/squid:openssl3-test2

Merged into ubuntu/+source/squid:ubuntu/devel at revision 819f9438ef366292a90afe3f0c3b562fb010ac95

Andreas Hasenack (community): Approve on 2022-02-10

Canonical Server: Pending requested 2022-02-08

Paride Legovini (paride) on 2021-10-07

Changed in squid (Ubuntu):
importance:	Undecided → High

Sergio Durigan Junior (sergiodj) on 2021-11-09

Changed in squid (Ubuntu):
assignee:	nobody → Sergio Durigan Junior (sergiodj)
status:	New → Triaged

Sergio Durigan Junior (sergiodj) on 2021-11-10

tags:

added: server-next

Revision history for this message

Simon Chopin (schopin) wrote on 2021-11-19:

squid.debdiff Edit (25.7 KiB, text/plain)

Patch based on the PR linked above, uploaded to both
https://launchpad.net/~schopin/+archive/ubuntu/test-ppa/ (libssl1.1)
and
https://launchpad.net/~schopin/+archive/ubuntu/foundation-openssl3/ (libssl3)

The autopkgtests fail currently because of https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1951476

Revision history for this message

Sergio Durigan Junior (sergiodj) wrote on 2021-11-19:

Yeah, I'm still testing the upstream patch. They asked for more testers/reviewers and I intend to provide some feedback there, but we're unfortunately blocked on the apache2 bug (which is preventing us from running autopkgtest).

Ubuntu Foundations Team Bug Bot (crichton) on 2021-11-19

tags:

added: patch

Andreas Hasenack (ahasenack) on 2021-12-27

tags:

added: update-excuse update-excuses

Robie Basak (racb) on 2022-01-19

Changed in squid (Ubuntu):
milestone:	none → ubuntu-22.04-feature-freeze

Sergio Durigan Junior (sergiodj) on 2022-02-08

Changed in squid (Ubuntu):
status:	Triaged → In Progress

Revision history for this message

Launchpad Janitor (janitor) wrote on 2022-02-11:

This bug was fixed in the package squid - 5.2-1ubuntu3

---------------
squid (5.2-1ubuntu3) jammy; urgency=medium

  * Fix FTBFS with OpenSSL 3.0 (LP: #1946205). The following new
    patches have been added:
    - d/p/openssl3-Declaration-of-CRYPTO_EX_dup-changed-again-in-3.0.patch.
    - d/p/openssl3-Detect-and-default-enable-OpenSSL-3.patch.
    - d/p/openssl3-Fix-EVP_PKEY_get0_RSA-is-deprecated.patch.
    - d/p/openssl3-Initial-DH-conversion-to-EVP_PKEY.patch.
    - d/p/openssl3-Refactor-Ssl-createSslPrivateKey.patch.
    - d/p/openssl3-Remove-stale-TODO-and-comment.patch.
    - d/p/openssl3-SSL_OP_-macro-definitions-changed-in-3.0.patch.
    - d/p/openssl3-Switch-to-BN_rand.patch.
    - d/p/openssl3-TODO-Upgrade-API-calls-verifying-loaded-DH-params-fi.patch.
    - d/p/openssl3-Tweak-RSA-key-generator.patch.
    - d/p/openssl3-Update-ECDH-key-settings.patch.
    - d/p/openssl3-Update-license-disclaimer.patch.