Bug 6841 – GSI does not compile with latest openssl

Bug 6841 - GSI does not compile with latest openssl

Summary:

GSI does not compile with latest openssl

Status:	RESOLVED FIXED

Product:	GSI C
Component:	Authentication
Version:	4.2.1
Platform:	NorduGrid Linux

Importance:	P3 blocker
Target Milestone:	---
Assigned To:	Joe Bester

URL:	http://www.grid.tsl.uu.se/repos/globu...
Keywords:

Depends on:
Blocks:	6896
	Show dependency tree / graph

Reported:	2009-08-21 10:07 by Mattias Ellert
Modified:	2010-02-23 17:51 (History)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note

You need to log in before you can comment on or make changes to this bug.

Description From Mattias Ellert 2009-08-21 10:07:30

Building globus-gsi-proxy-ssl with openssl 1.0.0-beta3 (Fedora 12) fails
because the GSI code uses the ASN1_METHOD struct and related functions which
are no longer available in openssl.

From the openssl CHANGES file:

  *) Remove the ancient ASN1_METHOD code. This was only ever used in one
     place for the (very old) "NETSCAPE" format certificates which are now
     handled using new ASN1 code equivalents.

Is anyone working on porting Globus to the new openssl?

------- Comment #1 From Mattias Ellert 2009-08-21 14:21:21 -------

The linked patch is a workaround for the problem that puts the definitions for
PROXYCERTINFO_asn1_meth() and PROXYPOLICY_asn1_meth() inside a #if
OPENSSL_VERSION_NUMBER < 0x10000000L  ...  #endif conditional.

A grep of the source tree doesn't find anything that uses these functions
within the globus toolkit.

------- Comment #2 From Mattias Ellert 2009-09-15 10:51:29 -------

Also globus-gsi-credential needs to be patched to compile with openssl 1.0:

http://www.grid.tsl.uu.se/repos/globus/info/globus-gsi-credential-openssl.patch

------- Comment #3 From Joe Bester 2010-02-23 17:51:01 -------

I've committed these patches and a few others to get GRAM5 working on Fedora
12. Those are committed to the 5.0 branch and trunk.