Bug 673956 – net-proxy/squid-3.5.28 with dev-libs/openssl-1.1.0j - In file included from ../../src/anyp/PortCfg.h:18, from PortCfg.cc:10: ../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope

• Status: RESOLVED WONTFIX
• Product: Gentoo Linux

[Description Kobboi 2018-12-29 09:34:38 UTC]

Making all in anyp
make[3]: Entering directory '/var/tmp/portage/portage/net-proxy/squid-3.5.28/work/squid-3.5.28/src/anyp'
/bin/sh ../../libtool  --tag=CXX   --mode=compile x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H   -I../.. -I../../include -I../../lib -I../../src -I../../include     -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c -o PortCfg.lo PortCfg.cc
/bin/sh ../../libtool  --tag=CXX   --mode=compile x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H   -I../.. -I../../include -I../../lib -I../../src -I../../include     -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c -o ProtocolType.lo ProtocolType.cc
/bin/sh ../../libtool  --tag=CXX   --mode=compile x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H   -I../.. -I../../include -I../../lib -I../../src -I../../include     -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c -o UriScheme.lo UriScheme.cc
libtool: compile:  x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c PortCfg.cc  -fPIC -DPIC -o .libs/PortCfg.o
libtool: compile:  x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c ProtocolType.cc  -fPIC -DPIC -o .libs/ProtocolType.o
libtool: compile:  x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c UriScheme.cc  -fPIC -DPIC -o .libs/UriScheme.o
libtool: compile:  x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c UriScheme.cc -o UriScheme.o >/dev/null 2>&1
In file included from ../../src/anyp/PortCfg.h:18,
                 from PortCfg.cc:10:
../../src/ssl/gadgets.h:83:45: error: ‘CRYPTO_LOCK_X509’ was not declared in this scope
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
                                             ^~~~~~~~~~~~~~~~
libtool: compile:  x86_64-pc-linux-gnu-g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../lib -I../../src -I../../include -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Wshadow -Woverloaded-virtual -pipe -D_REENTRANT -I/usr/include/p11-kit-1 -O2 -march=x86-64 -pipe -fomit-frame-pointer -c ProtocolType.cc -o ProtocolType.o >/dev/null 2>&1
../../src/ssl/gadgets.h:83:45: note: suggested alternative: ‘CRYPTO_LOCK’
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
                                             ^~~~~~~~~~~~~~~~
                                             CRYPTO_LOCK
../../src/ssl/gadgets.h:83:61: error: template argument 3 is invalid
 typedef LockingPointer<X509, X509_free_cpp, CRYPTO_LOCK_X509> X509_Pointer;
                                                             ^
../../src/ssl/gadgets.h:89:53: error: ‘CRYPTO_LOCK_EVP_PKEY’ was not declared in this scope
 typedef LockingPointer<EVP_PKEY, EVP_PKEY_free_cpp, CRYPTO_LOCK_EVP_PKEY> EVP_PKEY_Pointer;
                                                     ^~~~~~~~~~~~~~~~~~~~
../../src/ssl/gadgets.h:89:53: note: suggested alternative: ‘CRYPTO_LOCK’
 typedef LockingPointer<EVP_PKEY, EVP_PKEY_free_cpp, CRYPTO_LOCK_EVP_PKEY> EVP_PKEY_Pointer;
                                                     ^~~~~~~~~~~~~~~~~~~~
                                                     CRYPTO_LOCK
../../src/ssl/gadgets.h:89:73: error: template argument 3 is invalid
 def LockingPointer<EVP_PKEY, EVP_PKEY_free_cpp, CRYPTO_LOCK_EVP_PKEY> EVP_PKEY_Pointer;
                                                                     ^

../../src/ssl/gadgets.h:116:43: error: ‘CRYPTO_LOCK_SSL’ was not declared in this scope
 typedef LockingPointer<SSL, SSL_free_cpp, CRYPTO_LOCK_SSL> SSL_Pointer;
                                           ^~~~~~~~~~~~~~~
../../src/ssl/gadgets.h:116:43: note: suggested alternative: ‘CRYPTO_LOCK’
 typedef LockingPointer<SSL, SSL_free_cpp, CRYPTO_LOCK_SSL> SSL_Pointer;
                                           ^~~~~~~~~~~~~~~
                                           CRYPTO_LOCK
../../src/ssl/gadgets.h:116:58: error: template argument 3 is invalid
 typedef LockingPointer<SSL, SSL_free_cpp, CRYPTO_LOCK_SSL> SSL_Pointer;
                                                          ^
make[3]: *** [Makefile:801: PortCfg.lo] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory '/var/tmp/portage/portage/net-proxy/squid-3.5.28/work/squid-3.5.28/src/anyp'
make[2]: *** [Makefile:7483: all-recursive] Error 1
make[2]: Leaving directory '/var/tmp/portage/portage/net-proxy/squid-3.5.28/work/squid-3.5.28/src'
make[1]: *** [Makefile:6338: all] Error 2
make[1]: Leaving directory '/var/tmp/portage/portage/net-proxy/squid-3.5.28/work/squid-3.5.28/src'
make: *** [Makefile:578: all-recursive] Error 1

[Comment 1 Kobboi 2018-12-29 09:35:52 UTC]

[I] dev-libs/openssl
     Available versions:  
     (0.9.8) 0.9.8z_p8-r1^d
     (0)    1.0.2p-r1^d 1.0.2q^d (~)1.1.0j(0/1.1)^d{tbz2} [M](~)1.1.1a(0/1.1)^d
       {+asm bindist gmp kerberos rfc3779 sctp sslv2 (+)sslv3 static-libs test (+)tls-heartbeat vanilla zlib ABI_MIPS="n32 n64 o32" ABI_PPC="32 64" ABI_S390="32 64" ABI_X86="32 64 x32" CPU_FLAGS_X86="sse2" ELIBC="musl"}
     Installed versions:  1.1.0j(0/1.1)^d{tbz2}(23:52:22 28/12/18)(asm zlib -bindist -rfc3779 -sctp -static-libs -test -tls-heartbeat -vanilla ABI_MIPS="-n32 -n64 -o32" ABI_PPC="-32 -64" ABI_S390="-32 -64" ABI_X86="32 64 -x32" CPU_FLAGS_X86="sse2" ELIBC="-musl")
     Homepage:            https://www.openssl.org/
     Description:         full-strength general purpose cryptography library (including SSL and TLS)

[ebuild   R    ] net-proxy/squid-3.5.28::gentoo  USE="htcp ipv6 ldap pam samba ssl wccp wccpv2 -caps -ecap -esi (-ipf-transparent) -kerberos (-kqueue) -libressl -logrotate -mysql -nis -perl (-pf-transparent) -postgres -qos -radius -sasl (-selinux) -snmp -sqlite -ssl-crtd -test -tproxy" 0 KiB

[Comment 2 Mikle Kolyada (RETIRED) 2019-02-24 11:49:27 UTC]

*** Bug 674232 has been marked as a duplicate of this bug. ***

[Comment 3 Mikle Kolyada (RETIRED) 2019-03-08 12:07:42 UTC]

could you test 4.6 please? As far as I remember openssl-1.x is not supported by 3.x branch at all

[Comment 4 Kobboi 2019-03-08 14:14:55 UTC]

Well, squid-4.6 compiles and executes fine with openssl-1.1.0j-r1, but haven't tested extensively. Also note that there's a :1.0.0 slot that, if your statement is correct, you can depend on for the older squid releases.

[Comment 5 Mikle Kolyada (RETIRED) 2019-03-08 15:56:28 UTC]

*** Bug 678624 has been marked as a duplicate of this bug. ***

[Comment 6 Mikle Kolyada (RETIRED) 2019-03-08 16:00:17 UTC]

(In reply to Kobboi from comment #4)
> Well, squid-4.6 compiles and executes fine with openssl-1.1.0j-r1, but
> haven't tested extensively. Also note that there's a :1.0.0 slot that, if
> your statement is correct, you can depend on for the older squid releases.

Yes, 1.1.x is not supposed to work with 3.x branch of squid, so the dependency string should be corrected.

[Comment 7 Martin Mokrejš 2019-03-16 14:33:07 UTC]

I installed

# emerge dev-libs/openssl:1.0.0 -pv

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] dev-libs/openssl-1.0.2r-r200:1.0.0::gentoo  USE="asm gmp sctp sslv3 zlib -bindist -kerberos -rfc3779 -sslv2 -static-libs {-test} -tls-heartbeat -vanilla" ABI_X86="32 (64) (-x32)" CPU_FLAGS_X86="(sse2)" 0 KiB

but provided I still have

# emerge dev-libs/openssl -pv

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R    ] dev-libs/openssl-1.1.0j-r1:0/1.1::gentoo  USE="asm sctp zlib -bindist -rfc3779 -static-libs {-test} -tls-heartbeat -vanilla" ABI_X86="32 (64) (-x32)" CPU_FLAGS_X86="(sse2)" 0 KiB

installed as well, compilation of net-proxy/squid still fails in the same place.

[Comment 8 Tomáš Mózes 2019-05-02 07:57:05 UTC]

https://wiki.squid-cache.org/SquidFaq/CompilingSquid:
/!\ However, please note that Squid-3.5 is not compatible with OpenSSL v1.1+. This is resolved in the Squid-4 packages.