make error "callback.c:108:20:"

[Rapt88]

Possibly the same as the other open issue.

Making all in src/sv
make[1]: Entering directory '/home/user/Documents/openca-tools-master/src/sv'
gcc -DHAVE_CONFIG_H -I. -I../../include/openca -I../../include -g -O2 -fstack-check -maccumulate-outgoing-args -MT callback.o -MD -MP -MF .deps/callback.Tpo -c -o callback.o callback.c
callback.c: In function ‘verify_callback’:
callback.c:108:20: error: dereferencing pointer to incomplete type ‘X509_STORE_CTX’ {aka ‘struct x509_store_ctx_st’}
switch (ctx->error) {
^~
make[1]: *** [Makefile:340: callback.o] Error 1
make[1]: Leaving directory '/home/user/Documents/openca-tools-master/src/sv'
make: *** [Makefile:394: all-recursive] Error 1

[Rapt88]

I thought it was worth stating the following.

1. I think this is related to openssl which is running at version 1.1. I believe openCA is designed for version 1.0.
2. On Debian 10 I have therefore removed openssl 1.1 and installed openssl 1.0, and run the make command. The result is below.

Making all in src/sv
make[1]: Entering directory '/home/user/Documents/openca-tools-master/src/sv'
/bin/bash ../../libtool --tag=CC --mode=link gcc -g -O2 -fstack-check -maccumulate-outgoing-args -o openca-sv apps.o sv.o tools.o callback.o verify-crypto.o sign-crypto.o -lcrypto -lssl -ldl
libtool: link: gcc -g -O2 -fstack-check -maccumulate-outgoing-args -o openca-sv apps.o sv.o tools.o callback.o verify-crypto.o sign-crypto.o -lcrypto -lssl -ldl
/usr/bin/ld: apps.o: in function load_netscape_key': /home/user/Documents/openca-tools-master/src/sv/apps.c:504: undefined reference to d2i_RSA_NET'
/usr/bin/ld: sign-crypto.o: in function do_encrypt': /home/user/Documents/openca-tools-master/src/sv/sign-crypto.c:138: undefined reference to sk_new_null'
/usr/bin/ld: /home/user/Documents/openca-tools-master/src/sv/sign-crypto.c:141: undefined reference to sk_push' /usr/bin/ld: /home/user/Documents/openca-tools-master/src/sv/sign-crypto.c:138: undefined reference to sk_new_null'
/usr/bin/ld: /home/user/Documents/openca-tools-master/src/sv/sign-crypto.c:141: undefined reference to `sk_push'
collect2: error: ld returned 1 exit status
make[1]: *** [Makefile:324: openca-sv] Error 1
make[1]: Leaving directory '/home/user/Documents/openca-tools-master/src/sv'
make: *** [Makefile:394: all-recursive] Error 1

3. This is more promising (I think), but as a result has broken the other software on the Debian box I'm using which depend on openssl v1.1.

[pdolinic]

I can confirm this bug on Debian 10, any fixes?

[Rapt88]

I can confirm this bug on Debian 10, any fixes?

The solution for me pdolinic was to not use OpenCA. I tried getting help to be told that they had tested this and it works. I therefore decided it wasnt worth the effort of investigating further, if the developers also didnt want to.

I moved over to https://github.com/smallstep these guys are great, and incredibly helpful (most importantly, they really believe in their products).