Re: Unable to build ELL with OpenSSL 3
James Prestwood <prestwoj at gmail.com>
| Newsgroups | dev.linux.lists.ell,dev.linux.lists.iwd |
|---|---|
| Message-ID | <[email protected]> |
Hi, On Wed, 2022-03-09 at 18:36 +0800, wen zhang wrote: > I tried to build ELL library on my system built following LFS 11.1, > but the make command failed. Adding V=1 to the make command show one > openssl command failed to finish. > > openssl pkcs8 -in unit/cert-client-key-pkcs8.pem -out unit/cert- > > client-key-pkcs8-v2-des.pem -topk8 -v2 des-cbc -v2prf hmacWithSHA1 > > -passout pass:abc > > > > Maybe something need to migrate from OpenSSL 1 to OpenSSL 3? So it appears DES was removed from OpenSSL3 as a built in module [1]. I'm guessing there is some way to compile this in, but the documentation also mentions some runtime legacy provider. So I think you'll need to rebuild openssl with DES built in or figure out a way to enable this provider. I'm thinking we do want to support the default OpenSSL3 build at some point in the future, but I'm not sure if our build system can enable this feature automatically or not. One thing to note is that OpenSSL is only used to verify ELL's crypto APIs in unit testing. So this failure should not block you from using the ELL API or IWD. And for IWD specifically all the unit tests build with OpenSSL3 since none use DES. Also, there is a mailing list specific to ELL ell(a)lists.01.org. [1] https://wiki.openssl.org/index.php/OpenSSL_3.0#Providers > _______________________________________________ > iwd mailing list -- iwd(a)lists.01.org > To unsubscribe send an email to iwd-leave(a)lists.01.org
attachment.htm
(text/html, 2.4 KB)
<html><head></head><body><div>Hi,</div><div><br></div><div>On Wed, 2022-03-09 at 18:36 +0800, wen zhang wrote:</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div dir="ltr"><div>I tried to build ELL library on my system built following <a href="https://www.linuxfromscratch.org/lfs/view/stable-systemd/">LFS 11.1</a>, but the make command failed. Adding V=1 to the make command show one openssl command failed to finish.</div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>openssl pkcs8 -in unit/cert-client-key-pkcs8.pem -out unit/cert-client-key-pkcs8-v2-des.pem -topk8 -v2 des-cbc -v2prf hmacWithSHA1 -passout pass:abc</div><br></blockquote><div>Maybe something need to migrate from OpenSSL 1 to OpenSSL 3? <br></div></div></blockquote><div><br></div><div>So it appears DES was removed from OpenSSL3 as a built in module [1]. I'm guessing there is some way to compile this in, but the documentation also mentions some runtime legacy provider. So I think you'll need to rebuild openssl with DES built in or figure out a way to enable this provider. I'm thinking we do want to support the default OpenSSL3 build at some point in the future, but I'm not sure if our build system can enable this feature automatically or not. </div><div><br></div><div>One thing to note is that OpenSSL is only used to verify ELL's crypto APIs in unit testing. So this failure should not block you from using the ELL API or IWD. And for IWD specifically all the unit tests build with OpenSSL3 since none use DES.</div><div><br></div><div>Also, there is a mailing list specific to ELL <a href="mailto:[email protected]" title="Click to mail [email protected]" style="white-space: nowrap;">[email protected].</a></div><div><br></div><div>[1] <a href="https://wiki.openssl.org/index.php/OpenSSL_3.0#Providers">https://wiki.openssl.org/index.php/OpenSSL_3.0#Providers</a></div><div><br></div><blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex"><div>_______________________________________________<br></div><div>iwd mailing list -- <a href="mailto:[email protected]">[email protected]</a><br></div><div>To unsubscribe send an email to <a href="mailto:[email protected]">[email protected]</a><br></div></blockquote><div><br></div><div><span></span></div></body></html>