From 2d5bbc7abbf7d91582fd5d6cdfe26fcd72e13e6d Mon Sep 17 00:00:00 2001
From: Tianyu Chen <sweetyfish@deepin.org>
Date: Wed, 15 Nov 2023 14:03:27 +0800
Subject: [PATCH] Fix FTBFS with openssl 3.0.12

Ref: https://github.com/nodejs/node/pull/50395
Ref: https://bugs.debian.org/1055416
Ref: https://github.com/deepin-community/sig-deepin-sysdev-team/issues/536
---
 debian/changelog                          |  9 +++++
 debian/patches/build/openssl-3.0.12.patch | 43 +++++++++++++++++++++++
 debian/patches/series                     |  1 +
 3 files changed, 53 insertions(+)
 create mode 100644 debian/patches/build/openssl-3.0.12.patch

diff --git a/debian/changelog b/debian/changelog
index 1e6fcbd92..cd68b8e64 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+nodejs (18.13.0+dfsg1-1deepin1) unstable; urgency=medium
+
+  * Fix FTBFS with openssl 3.0.12.
+    Ref: https://github.com/nodejs/node/pull/50395
+    Ref: https://bugs.debian.org/1055416
+    Ref: https://github.com/deepin-community/sig-deepin-sysdev-team/issues/536
+
+ -- Tianyu Chen <sweetyfish@deepin.org>  Wed, 15 Nov 2023 13:52:34 +0800
+
 nodejs (18.13.0+dfsg1-1) unstable; urgency=medium
 
   [ Bo YU ]
diff --git a/debian/patches/build/openssl-3.0.12.patch b/debian/patches/build/openssl-3.0.12.patch
new file mode 100644
index 000000000..62e089a31
--- /dev/null
+++ b/debian/patches/build/openssl-3.0.12.patch
@@ -0,0 +1,43 @@
+From 8eea2d3709090b9722cb16090abfd23b054689be Mon Sep 17 00:00:00 2001
+From: Kerem Kat <keremkat@gmail.com>
+Date: Fri, 27 Oct 2023 19:01:10 +0100
+Subject: [PATCH] test: fix crypto-dh error message for OpenSSL 3.x
+
+OpenSSL 3.0.12 and 3.1.4 changes the type of error short keys and IVs
+cause. The error message in test-crypto-dh for the "empty secret" is
+now 'Supplied key is too small' instead of
+'error:02800080:Diffie-Hellman routines::invalid secret'.
+
+Error message change is test-only and uses the right error message for
+versions >=3.0.12 in 3.0.x and >= 3.1.4 in 3.1.x series.
+
+ref. https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d
+ref. https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee
+ref. https://www.openssl.org/news/vulnerabilities.html#CVE-2023-5363
+
+PR-URL: https://github.com/nodejs/node/pull/50395
+Reviewed-By: Richard Lau <rlau@redhat.com>
+Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
+--- a/test/parallel/test-crypto-dh.js
++++ b/test/parallel/test-crypto-dh.js
+@@ -163,11 +163,15 @@
+   }, wrongBlockLength);
+ }
+ 
+-assert.throws(() => {
+-  dh3.computeSecret('');
+-}, { message: common.hasOpenSSL3 ?
+-  'error:02800080:Diffie-Hellman routines::invalid secret' :
+-  'Supplied key is too small' });
++{
++  const v = crypto.constants.OPENSSL_VERSION_NUMBER;
++  const hasOpenSSL3WithNewErrorMessage = (v >= 0x300000c0 && v <= 0x30100000) || (v >= 0x30100040 && v <= 0x30200000);
++  assert.throws(() => {
++    dh3.computeSecret('');
++  }, { message: common.hasOpenSSL3 && !hasOpenSSL3WithNewErrorMessage ?
++    'error:02800080:Diffie-Hellman routines::invalid secret' :
++    'Supplied key is too small' });
++}
+ 
+ // Invalid test: curve argument is undefined
+ assert.throws(
diff --git a/debian/patches/series b/debian/patches/series
index a1f9aebdc..de2d689b0 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,4 +1,5 @@
 build/openssl_config_explicit_lower.patch
+build/openssl-3.0.12.patch
 build/more_shareable_builtins.patch
 build/cctest_disable.patch
 build/doc.patch