Yubico/yubico-piv-tool

OpenSSL-3 incompatibility

Closed this issue · 8 comments

Attempting to link yubico-piv-tool against OpenSSL-3 (currently in beta) results in compilation errors in ykcs11.c; see the build log attached to https://bugs.gentoo.org/805914 for details. If I understand the OpenSSL-3.0.0 design document correctly, the problem lies with it now being required for provider modules to implement a well-defined entry point in order to be able to communicate with the OpenSSL core.

We're hitting this now in Fedora rawhide as well.

We don't currently support OpenSSL 3, please build with OpenSSL 1.1 for the time being.

It would be good to inverts some time to allow build with 3.0.0 because more and more distributions is switching now to latest openssl.

Agreed, this should be fixed at some point. We should also remove support for OpenSSL 1.0.

That's #334, I think.

Just tested that PR and look like that it fixes the issue :)

@qpernil This should probably be closed as fixed then?

Fixed by #334