Full_Name: Mitchell Blank Version: 2.4.43 OS: linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (80.169.198.86)
Recently a couple alpha releases for OpenSSL 1.1.X have been posted on www.openssl.org with the request that software be tested against them prior to release.
I tried compiling the most recent OpenLDAP against it, but it failed. One of the overarching changes that OpenSSL is making is that many of its datatypes are now only visible as opaque pointers (in other words, their layout and size are considered private to OpenSSL itself)
This caused the following compile errors in tls_o.c:
openldap-2.4.43/libraries/libldap/tls_o.c: In function tlso_ctx_ref: openldap-2.4.43/libraries/libldap/tls_o.c:199:20: error: dereferencing pointer
to incomplete type
CRYPTO_add( &c->references, 1, CRYPTO_LOCK_SSL_CTX ); ^ openldap-2.4.43/libraries/libldap/tls_o.c: In function tlso_session_my_dn: openldap-2.4.43/libraries/libldap/tls_o.c:451:21: error: dereferencing pointer
to incomplete type der_dn->bv_val = xn->bytes->data;
^openldap-2.4.43/libraries/libldap/tls_o.c: In function
tlso_session_peer_dn:
openldap-2.4.43/libraries/libldap/tls_o.c:478:21: error: dereferencing pointer
to incomplete type der_dn->bv_val = xn->bytes->data;
^openldap-2.4.43/libraries/libldap/tls_o.c: In function
tlso_session_chkhost:
openldap-2.4.43/libraries/libldap/tls_o.c:618:21: error: dereferencing pointer
to incomplete type
if ( !OBJ_cmp( ne->object, obj )) { ^
The last one can probably be replaced with a X509_NAME_ENTRY_get_object() call. I don't know enough about the X509_NAME API to know how to fix the ->bytes->data ones.
For what it's worth, there were also a couple deprecated warnings:
openldap-2.4.43/libraries/libldap/tls_o.c:179:2: warning: ERR_remove_state
is deprecated
openldap-2.4.43/libraries/libldap/tls_o.c:1251:3: warning:
DH_generate_parameters is deprecated
Right now this isn't super urgency, but within a couple months OpenSSL 1.1.0 is expected to be released and suddenly a lot more people will be hitting this issue.