Issue in creating server encryption with latest support for openssl version 3 and above on linux platform

[jchirantan]

Description

When I tried to invoke UA_CreateCertificate() method from a broker(Java code),
I was getting error: "Create Certificate: Setting publik key failed."

When I commented following code in file /plugins/crypto/openssl/ua_openssl_create_certificate.c, it worked fine:

What can be reason for this and is it fine to comment that part of code?

Used CMake options:

cmake .. -DBUILD_SHARED_LIBS=ON -DCMAKE_BUILD_TYPE=Release -DUA_BUILD_EXAMPLES=ON -DUA_ENABLE_PUBSUB=ON -DUA_ENABLE_PUBSUB_MQTT=OFF -DUA_ENABLE_JSON_ENCODING=ON -DUA_ENABLE_DEBUG_SANITIZER=OFF -DUA_ENABLE_DISCOVERY_SEMAPHORE=OFF -DUA_ENABLE_HARDENING=OFF -DUA_ENABLE_NODEMANAGEMENT=OFF -DUA_ENABLE_NODESET_COMPILER_DESCRIPTIONS=OFF -DUA_ENABLE_PARSING=OFF -DUA_ENABLE_PUBSUB_DELTAFRAMES=OFF -DUA_ENABLE_PUBSUB_INFORMATIONMODEL=ON -DUA_ENABLE_PUBSUB_INFORMATIONMODEL_METHODS=OFF -DUA_ENABLE_STATUSCODE_DESCRIPTIONS=OFF -DUA_ENABLE_SUBSCRIPTIONS=OFF -DUA_ENABLE_SUBSCRIPTIONS_EVENTS=OFF -DUA_ENABLE_TYPEDESCRIPTION=ON -DUA_FORCE_WERROR=OFF -DUA_MSVC_FORCE_STATIC_CRT=OFF -DUA_ENABLE_ENCRYPTION_TPM2=OFF -DUA_LOGLEVEL=100 -DUA_ENABLE_ENCRYPTION=MBEDTLS -DUA_ENABLE_PUBSUB_ENCRYPTION=ON -DMBEDTLS_INCLUDE_DIRS="/usr/include/mbedtls" -DMBEDTLS_LIBRARY="/usr/lib/x86_64-linux-gnu/libmbedtls.so.14" -DMBEDX509_LIBRARY="/usr/lib/x86_64-linux-gnu/libmbedx509.so.1" -DMBEDCRYPTO_LIBRARY="/usr/lib/x86_64-linux-gnu/libmbedcrypto.so.7" -DUA_ENABLE_ENCRYPTION=OPENSSL

Checklist

• open62541 Version (release number or git tag): 1.3.6
• Operating system: Ubuntu 22.04

[jchirantan]

• Currently I have installed OpenSSL version 3.0 on Linux.
• I wanted to ask if there is any need to install OpenSSL on our OS(Windows/Linux) or SDK provides support for OpenSSL internally?
• If I am required to install OpenSSL, then which is the recommended version?