** Description changed: + The openssl-ibmca package comes upstream with support for engines AND providers, + hence can build both. + + Since with openssl 4.x the engine support was entirely removed, + the build of engines does no longer make sense and needs to be turned off. + + This can be done based on the application code as-is, + only package meta data changes are needed: + + * Switch from the removed OpenSSL ENGINE API to the OpenSSL provider API. + OpenSSL 4.0 no longer supports engines, so build and ship the IBMCA + provider only, instead of the IBMCA engine (LP: #2166513): + - d/rules: configure with --disable-engine --enable-provider and place + the provider module into .../ossl-modules via --libdir; drop the + engine opensslconfig build step and the engine cleanup logic. + - d/control: reword the description to describe the IBMCA provider + instead of the engine. + - d/openssl-ibmca.install: ship the provider config helper only; the + provider module (ibmca-provider.so) and its man page are installed + by "make install". + - d/examples: ship only the provider openssl.cnf sample. + - d/patches: drop openssl-config.patch and testconf-openssl3.patch, + which only touched the no-longer-built engine sample and engine + tests. + + Since I had to touch the package, I took the change and updated the + Standards-Version to the latest (no adjustments were needed) and also + updated the watch file to v5: + + * d/control: bump Standards-Version to 4.7.4 + * d/watch: convert to watch file version 5 + + Please also see the successful test build in PPA: + https://launchpad.net/~fheimes/+archive/ubuntu/lp2166513 + + And a successfully executed test plan: + + __________ + Engine support has been removed from OpenSSl 4. This package fails to build in the stonking archive. https://launchpad.net/ubuntu/+source/openssl-ibmca/2.5.0-0ubuntu3 https://openssl-library.org/post/2026-04-14-openssl-40-final-release/ https://openssl-library.org/post/2025-12-18-remove-engines/index.html - ❯ reverse-depends openssl-ibmca --release stonking No reverse dependencies found ❯ reverse-depends src:openssl-ibmca --release stonking No reverse dependencies found
** Attachment added: "openssl-ibmca_test.txt" https://bugs.launchpad.net/ubuntu/+source/openssl-ibmca/+bug/2166513/+attachment/5999036/+files/openssl-ibmca_test.txt ** Changed in: openssl-ibmca (Ubuntu) Assignee: (unassigned) => Frank Heimes (fheimes) ** Changed in: ubuntu-z-systems Importance: Undecided => High ** Changed in: ubuntu-z-systems Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team) ** Changed in: openssl-ibmca (Ubuntu) Importance: Undecided => High ** Changed in: ubuntu-z-systems Status: New => In Progress ** Changed in: openssl-ibmca (Ubuntu) Status: New => In Progress ** Description changed: The openssl-ibmca package comes upstream with support for engines AND providers, hence can build both. Since with openssl 4.x the engine support was entirely removed, the build of engines does no longer make sense and needs to be turned off. This can be done based on the application code as-is, only package meta data changes are needed: - * Switch from the removed OpenSSL ENGINE API to the OpenSSL provider API. - OpenSSL 4.0 no longer supports engines, so build and ship the IBMCA - provider only, instead of the IBMCA engine (LP: #2166513): - - d/rules: configure with --disable-engine --enable-provider and place - the provider module into .../ossl-modules via --libdir; drop the - engine opensslconfig build step and the engine cleanup logic. - - d/control: reword the description to describe the IBMCA provider - instead of the engine. - - d/openssl-ibmca.install: ship the provider config helper only; the - provider module (ibmca-provider.so) and its man page are installed - by "make install". - - d/examples: ship only the provider openssl.cnf sample. - - d/patches: drop openssl-config.patch and testconf-openssl3.patch, - which only touched the no-longer-built engine sample and engine - tests. + * Switch from the removed OpenSSL ENGINE API to the OpenSSL provider API. + OpenSSL 4.0 no longer supports engines, so build and ship the IBMCA + provider only, instead of the IBMCA engine (LP: #2166513): + - d/rules: configure with --disable-engine --enable-provider and place + the provider module into .../ossl-modules via --libdir; drop the + engine opensslconfig build step and the engine cleanup logic. + - d/control: reword the description to describe the IBMCA provider + instead of the engine. + - d/openssl-ibmca.install: ship the provider config helper only; the + provider module (ibmca-provider.so) and its man page are installed + by "make install". + - d/examples: ship only the provider openssl.cnf sample. + - d/patches: drop openssl-config.patch and testconf-openssl3.patch, + which only touched the no-longer-built engine sample and engine + tests. Since I had to touch the package, I took the change and updated the Standards-Version to the latest (no adjustments were needed) and also updated the watch file to v5: - * d/control: bump Standards-Version to 4.7.4 - * d/watch: convert to watch file version 5 + * d/control: bump Standards-Version to 4.7.4 + * d/watch: convert to watch file version 5 Please also see the successful test build in PPA: https://launchpad.net/~fheimes/+archive/ubuntu/lp2166513 And a successfully executed test plan: + https://launchpadlibrarian.net/876391905/openssl-ibmca_test.txt __________ Engine support has been removed from OpenSSl 4. This package fails to build in the stonking archive. https://launchpad.net/ubuntu/+source/openssl-ibmca/2.5.0-0ubuntu3 https://openssl-library.org/post/2026-04-14-openssl-40-final-release/ https://openssl-library.org/post/2025-12-18-remove-engines/index.html ❯ reverse-depends openssl-ibmca --release stonking No reverse dependencies found ❯ reverse-depends src:openssl-ibmca --release stonking No reverse dependencies found ** Summary changed: - Please remove openssl-ibmca from the stonking archive + Please remove engines from openssl-ibmca for stonking (keep providers), since engine support was dropped in favour of providers -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166513 Title: Please remove engines from openssl-ibmca for stonking (keep providers), since engine support was dropped in favour of providers To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-z-systems/+bug/2166513/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
