[krbdev.mit.edu #6688] mit-krb5-1.7 fails to compile against openssl-1.0.0

[Daniel Black via RT]

I was doing some testing of the gentoo distribution to see what packages 
compile against openssl-1.0.0.

I discovered that the following compile error occurs with opnessl-1.0.0_beta5

pkinit_crypto_openssl.c: In function 'cms_signeddata_verify':
pkinit_crypto_openssl.c:1140: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c:1142: warning: pointer type mismatch in conditional expression
pkinit_crypto_openssl.c:1143: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c:1157: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c:1162: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c:1284: warning: passing argument 1 of 'print_buffer' discards qualifiers from pointer target type
pkinit.h:366: note: expected 'unsigned char *' but argument is of type 'const unsigned char *'
pkinit_crypto_openssl.c: In function 'crypto_retrieve_X509_sans':
pkinit_crypto_openssl.c:1738: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c: In function 'pkinit_open_session':
pkinit_crypto_openssl.c:3299: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c:3322: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c: In function 'pkinit_C_Decrypt':
pkinit_crypto_openssl.c:3449: warning: cast from pointer to integer of different size
pkinit_crypto_openssl.c: In function 'pkinit_decode_data_pkcs11':
pkinit_crypto_openssl.c:3492: warning: cast from pointer to integer of different size
pkinit_crypto_openssl.c:3492: warning: cast from pointer to integer of different size
pkinit_crypto_openssl.c:3493: warning: cast from pointer to integer of different size
pkinit_crypto_openssl.c: In function 'decode_data':
pkinit_crypto_openssl.c:3655: warning: passing argument 1 of 'EVP_PKEY_decrypt' from incompatible pointer type
/usr/include/openssl/evp.h:1089: note: expected 'struct EVP_PKEY_CTX *' but argument is of type 'unsigned char *'
pkinit_crypto_openssl.c:3655: warning: passing argument 3 of 'EVP_PKEY_decrypt' makes pointer from integer without a cast
/usr/include/openssl/evp.h:1089: note: expected 'size_t *' but argument is of type 'int'
pkinit_crypto_openssl.c:3655: warning: passing argument 4 of 'EVP_PKEY_decrypt' from incompatible pointer type
/usr/include/openssl/evp.h:1089: note: expected 'const unsigned char *' but argument is of type 'struct EVP_PKEY *'
pkinit_crypto_openssl.c:3655: error: too few arguments to function 'EVP_PKEY_decrypt'
pkinit_crypto_openssl.c: In function 'pkinit_get_certs_pkcs12':
pkinit_crypto_openssl.c:3778: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c: In function 'X509_NAME_oneline_ex':
pkinit_crypto_openssl.c:4489: warning: comparison between signed and unsigned integer expressions
pkinit_crypto_openssl.c: In function 'load_cas_and_crls':
pkinit_crypto_openssl.c:4820: warning: pointer type mismatch in conditional expression
pkinit_crypto_openssl.c:4820: warning: pointer type mismatch in conditional expression
pkinit_crypto_openssl.c:4850: warning: pointer type mismatch in conditional expression
pkinit_crypto_openssl.c: In function 'pkcs7_dataDecode':
pkinit_crypto_openssl.c:5497: warning: comparison between signed and unsigned integer expressions
distcc[3761] ERROR: compile pkinit_crypto_openssl.c on localhost failed
make[1]: *** [pkinit_crypto_openssl.so] Error 1
make[1]: Leaving directory `/var/tmp/portage/app-crypt/mit-krb5-1.7-r2/work/krb5-1.7/src/plugins/preauth/pkinit'


Just letting you know for future releases.

Kind regards,

Daniel