[HADOOP-14597] Native compilation broken with OpenSSL-1.1.0 because EVP_CIPHER_CTX has been made opaque

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha4
• Fix Version/s: 3.0.0-beta1, 2.10.1

Environment

openssl-1.1.0

• Target Version/s: 3.0.0-beta1
• Assignee: Ravi Prakash
• Reporter: Ravi Prakash
• Created: 27/Jun/17 18:51
• Updated: 20/Apr/20 06:19
• Resolved: 24/Jul/17 23:02

Description

Trying to build Hadoop trunk on Fedora 26 which has openssl-devel-1.1.0 fails with this error

[WARNING] /home/raviprak/Code/hadoop/trunk/hadoop-common-project/hadoop-common/src/main/native/src/org/apache/hadoop/crypto/OpensslCipher.c: In function ‘check_update_max_output_len’:
[WARNING] /home/raviprak/Code/hadoop/trunk/hadoop-common-project/hadoop-common/src/main/native/src/org/apache/hadoop/crypto/OpensslCipher.c:256:14: error: dereferencing pointer to incomplete type ‘EVP_CIPHER_CTX {aka struct evp_cipher_ctx_st}’
[WARNING]    if (context->flags & EVP_CIPH_NO_PADDING) {
[WARNING]               ^~

https://github.com/openssl/openssl/issues/962 mattcaswell says

One of the primary differences between master (OpenSSL 1.1.0) and the 1.0.2 version is that many types have been made opaque, i.e. applications are no longer allowed to look inside the internals of the structures

Issue Links

• is related to: HADOOP-16647 Support OpenSSL 1.1.1 LTS