Cannot build source because of outdated openssl version #6183
Description
Prerequisites
- I have searched the existing Closed AND Open Issues AND Discussions
- I have searched and read the documentation
Vaultwarden Support String
Your environment (Generated via diagnostics page)
- Vaultwarden version: v1.34.1-ce70cd2c
- Web-vault version: v2025.5.0
- OS/Arch: linux/x86_64
- Running within a container: false (Base: Not applicable)
- Database type: SQLite
- Database version: 3.50.2
- Uses config.json: true
- Uses a reverse proxy: true
- IP Header check: true (X-Real-IP)
- Internet access: true
- Internet access via a proxy: false
- DNS Check: true
- Browser/Server Time Check: true
- Server/NTP Time Check: true
- Domain Configuration Check: true
- HTTPS Check: true
- Websocket Check: true
- HTTP Response Checks: false
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: ADMIN_TOKEN
Failed HTTP Checks:
2FA Connector calls:
Header: 'x-frame-options' is present while it should not
Header: 'content-security-policy' is present while it should notConfig:
{
"_duo_akey": null,
"_enable_duo": true,
"_enable_email_2fa": false,
"_enable_smtp": true,
"_enable_yubico": true,
"_icon_service_csp": "",
"_icon_service_url": "",
"_ip_header_enabled": true,
"_max_note_size": 10000,
"_smtp_img_src": "***:",
"admin_ratelimit_max_burst": 3,
"admin_ratelimit_seconds": 300,
"admin_session_lifetime": 20,
"admin_token": "***",
"allowed_connect_src": "",
"allowed_iframe_ancestors": "",
"attachments_folder": "/opt/vaultwarden/data/attachments",
"auth_request_purge_schedule": "30 * * * * *",
"authenticator_disable_time_drift": false,
"data_folder": "/opt/vaultwarden/data",
"database_conn_init": "",
"database_max_conns": 10,
"database_timeout": 30,
"database_url": "********************************",
"db_connection_retries": 15,
"disable_2fa_remember": false,
"disable_admin_token": false,
"disable_icon_download": false,
"domain": "*****://***************************",
"domain_origin": "*****://***************************",
"domain_path": "",
"domain_set": true,
"duo_context_purge_schedule": "30 * * * * *",
"duo_host": null,
"duo_ikey": null,
"duo_skey": null,
"duo_use_iframe": false,
"email_2fa_auto_fallback": false,
"email_2fa_enforce_on_verified_invite": false,
"email_attempts_limit": 3,
"email_change_allowed": true,
"email_expiration_time": 600,
"email_token_size": 6,
"emergency_access_allowed": true,
"emergency_notification_reminder_schedule": "0 3 * * * *",
"emergency_request_timeout_schedule": "0 7 * * * *",
"enable_db_wal": true,
"enable_websocket": true,
"enforce_single_org_with_reset_pw_policy": false,
"event_cleanup_schedule": "0 10 0 * * *",
"events_days_retain": null,
"experimental_client_feature_flags": "",
"extended_logging": true,
"helo_name": null,
"hibp_api_key": null,
"http_request_block_non_global_ips": true,
"http_request_block_regex": null,
"icon_blacklist_non_global_ips": true,
"icon_blacklist_regex": null,
"icon_cache_folder": "/opt/vaultwarden/data/icon_cache",
"icon_cache_negttl": 259200,
"icon_cache_ttl": 2592000,
"icon_download_timeout": 10,
"icon_redirect_code": 302,
"icon_service": "internal",
"incomplete_2fa_schedule": "30 * * * * *",
"incomplete_2fa_time_limit": 3,
"increase_note_size_limit": false,
"invitation_expiration_hours": 120,
"invitation_org_name": "Vaultwarden",
"invitations_allowed": true,
"ip_header": "X-Real-IP",
"job_poll_interval_ms": 30000,
"log_file": null,
"log_level": "info",
"log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
"login_ratelimit_max_burst": 10,
"login_ratelimit_seconds": 60,
"org_attachment_limit": null,
"org_creation_users": "",
"org_events_enabled": false,
"org_groups_enabled": false,
"password_hints_allowed": true,
"password_iterations": 600000,
"push_enabled": false,
"push_identity_uri": "https://identity.bitwarden.com",
"push_installation_id": "***",
"push_installation_key": "***",
"push_relay_uri": "https://push.bitwarden.com",
"reload_templates": false,
"require_device_email": false,
"rsa_key_filename": "/opt/vaultwarden/data/rsa_key",
"send_purge_schedule": "0 5 * * * *",
"sendmail_command": null,
"sends_allowed": true,
"sends_folder": "/opt/vaultwarden/data/sends",
"show_password_hint": false,
"signups_allowed": false,
"signups_domains_whitelist": "",
"signups_verify": false,
"signups_verify_resend_limit": 6,
"signups_verify_resend_time": 3600,
"smtp_accept_invalid_certs": false,
"smtp_accept_invalid_hostnames": false,
"smtp_auth_mechanism": null,
"smtp_debug": false,
"smtp_embed_images": true,
"smtp_explicit_tls": null,
"smtp_from": "",
"smtp_from_name": "Vaultwarden",
"smtp_host": null,
"smtp_password": null,
"smtp_port": 587,
"smtp_security": "starttls",
"smtp_ssl": null,
"smtp_timeout": 15,
"smtp_username": null,
"templates_folder": "/opt/vaultwarden/data/templates",
"tmp_folder": "/opt/vaultwarden/data/tmp",
"trash_auto_delete_days": null,
"trash_purge_schedule": "0 5 0 * * *",
"use_sendmail": false,
"use_syslog": false,
"user_attachment_limit": null,
"user_send_limit": null,
"web_vault_enabled": true,
"web_vault_folder": "/opt/vaultwarden/web-vault",
"yubico_client_id": null,
"yubico_secret_key": null,
"yubico_server": null
}Vaultwarden Build Version
1.34.1-ce70cd2c
Deployment method
Other method
Custom deployment method
I installed it via the Proxmox Community Script (https://community-scripts.github.io/ProxmoxVE/scripts?id=vaultwarden), which in turn installs it with building from source and deploying with systemd.
I have installed
- openssl: version
1.1.1w-0+deb11u3 - pkgconf (instead of pkg-config): version
1.7.4~git20210206+dcf529b-3 - libssl-dev: version
1.1.1w-0+deb11u3
Reverse Proxy
nginx 1.28.0
Host/Server Operating System
Linux
Operating System Version
Debian 11
Clients
Web Vault
Client Version
v2025.7.0
Steps To Reproduce
- Try to update Vaultwarden using the Proxmox Community Script
or
- Clone this repo
- run
cargo build --features "sqlite,mysql,postgresql" --release
Expected Result
Build the binary without an issue.
Actual Result
Raised an error while installing rustfmt because of outdated openssl version for webauthn-attestation-ca.
Logs
info: syncing channel updates for '1.89.0-x86_64-unknown-linux-gnu'
info: latest update on 2025-08-07, rust version 1.89.0 (29483883e 2025-08-04)
info: downloading component 'cargo'
info: downloading component 'clippy'
info: downloading component 'rust-std'
info: downloading component 'rustc'
info: downloading component 'rustfmt'
info: installing component 'cargo'
info: installing component 'clippy'
info: installing component 'rust-std'
info: installing component 'rustc'
info: installing component 'rustfmt'
Updating crates.io index
Downloaded async-process v2.4.0
Downloaded asn1-rs-impl v0.2.0
Downloaded asn1-rs-derive v0.5.1
Downloaded async-io v2.5.0
Downloaded async-signal v0.2.12
Downloaded sec1 v0.7.3
Downloaded group v0.13.0
Downloaded triomphe v0.1.14
Downloaded backon v1.5.2
Downloaded dyn-clone v1.0.20
Downloaded lazy_static v1.5.0
Downloaded ff v0.13.1
Downloaded crc32fast v1.5.0
Downloaded dashmap v5.5.3
Downloaded curve25519-dalek-derive v0.1.1
Downloaded cached_proc_macro v0.25.0
Downloaded base64urlsafedata v0.5.2
Downloaded asn1-rs v0.6.2
Downloaded webauthn-attestation-ca v0.5.2
Downloaded serde_plain v1.0.2
Downloaded serde_path_to_error v0.1.17
Downloaded async-lock v3.4.1
Downloaded hex v0.4.3
Downloaded const-oid v0.9.6
Downloaded indexmap v1.9.3
Downloaded base16ct v0.2.0
Downloaded ed25519 v2.2.3
Downloaded webauthn-rs-proto v0.5.2
Downloaded signature v2.2.0
Downloaded serde-value v0.7.0
Downloaded spki v0.7.3
Downloaded ordered-float v2.10.1
Downloaded num-iter v0.1.45
Downloaded oid-registry v0.7.1
Downloaded rusticata-macros v4.1.0
Downloaded slab v0.4.11
Downloaded rfc6979 v0.4.0
Downloaded ecdsa v0.16.9
Downloaded primeorder v0.13.6
Downloaded serde_with_macros v3.14.0
Downloaded webauthn-rs v0.5.2
Downloaded signal-hook-registry v1.4.6
Downloaded pkcs1 v0.7.5
Downloaded cached v0.56.0
Downloaded toml_parser v1.0.2
Downloaded serde_cbor_2 v0.12.0-dev
Downloaded rustc_version v0.4.1
Downloaded async-compression v0.4.27
Downloaded toml v0.9.5
Downloaded der v0.7.10
Downloaded mini-moka v0.10.3
Downloaded elliptic-curve v0.13.8
Downloaded p256 v0.13.2
Downloaded socket2 v0.6.0
Downloaded der-parser v9.0.0
Downloaded polling v3.10.0
Downloaded litrs v0.4.2
Downloaded schemars v0.9.0
Downloaded schemars v1.0.4
Downloaded x509-parser v0.16.0
Downloaded hashbrown v0.12.3
Downloaded zerovec v0.11.4
Downloaded webauthn-rs-core v0.5.2
Downloaded openidconnect v4.0.1
Downloaded itertools v0.10.5
Downloaded tokio-util v0.7.16
Downloaded serde_json v1.0.142
Downloaded hkdf v0.12.4
Downloaded serde_with v3.14.0
Downloaded p384 v0.13.1
Downloaded h2 v0.4.12
Downloaded lettre v0.11.18
Downloaded webpki-roots v1.0.2
Downloaded curve25519-dalek v4.1.3
Downloaded hashbrown v0.15.5
Downloaded governor v0.10.1
Downloaded ed25519-dalek v2.2.0
Downloaded cc v1.2.32
Downloaded rustls v0.23.31
Downloaded rustix v1.0.8
Downloaded rand v0.9.2
Downloaded num-bigint-dig v0.8.4
Downloaded hyper-util v0.1.16
Downloaded rsa v0.9.8
Downloaded oauth2 v5.0.0
Downloaded crypto-bigint v0.5.5
Downloaded futures-lite v2.6.1
Downloaded event-listener v5.4.1
Downloaded pkcs8 v0.10.2
Downloaded pem-rfc7468 v0.7.0
Downloaded opendal v0.54.0
Downloaded tokio v1.47.1
Downloaded 92 crates (7.7MiB) in 2.69s
Compiling proc-macro2 v1.0.95
Compiling unicode-ident v1.0.18
Compiling libc v0.2.174
Compiling cfg-if v1.0.1
Compiling version_check v0.9.5
Compiling autocfg v1.5.0
Compiling serde v1.0.219
Compiling shlex v1.3.0
Compiling smallvec v1.15.1
Compiling memchr v2.7.5
Compiling portable-atomic v1.11.1
Compiling zeroize v1.8.1
Compiling itoa v1.0.15
Compiling critical-section v1.2.0
Compiling parking_lot_core v0.9.11
Compiling scopeguard v1.2.0
Compiling pin-project-lite v0.2.16
Compiling subtle v2.6.1
Compiling bytes v1.10.1
Compiling log v0.4.27
Compiling pkg-config v0.3.32
Compiling typenum v1.18.0
Compiling lock_api v0.4.13
Compiling generic-array v0.14.7
Compiling futures-core v0.3.31
Compiling stable_deref_trait v1.2.0
Compiling const-oid v0.9.6
Compiling zerocopy v0.8.26
Compiling libm v0.2.15
Compiling num-traits v0.2.19
Compiling allocator-api2 v0.2.21
Compiling quote v1.0.40
Compiling futures-sink v0.3.31
Compiling futures-io v0.3.31
Compiling percent-encoding v2.3.1
Compiling slab v0.4.11
Compiling syn v2.0.104
Compiling once_cell v1.21.3
Compiling num-conv v0.1.0
Compiling time-core v0.1.4
Compiling jobserver v0.1.33
Compiling litemap v0.8.0
Compiling writeable v0.6.1
Compiling futures-channel v0.3.31
Compiling futures-task v0.3.31
Compiling time-macros v0.2.22
Compiling getrandom v0.2.16
Compiling signal-hook-registry v1.4.6
Compiling cc v1.2.32
Compiling mio v1.0.4
Compiling socket2 v0.6.0
Compiling rand_core v0.6.4
Compiling parking_lot v0.12.4
Compiling icu_normalizer_data v2.0.0
Compiling icu_properties_data v2.0.1
Compiling pin-utils v0.1.0
Compiling vcpkg v0.2.15
Compiling block-buffer v0.10.4
Compiling crypto-common v0.1.6
Compiling digest v0.10.7
Compiling fnv v1.0.7
Compiling httparse v1.10.1
Compiling bitflags v2.9.1
Compiling powerfmt v0.2.0
Compiling tracing-core v0.1.34
Compiling utf8_iter v1.0.4
Compiling foldhash v0.1.5
Compiling deranged v0.4.0
Compiling num_threads v0.1.7
Compiling equivalent v1.0.2
Compiling hashbrown v0.15.5
Compiling form_urlencoded v1.2.1
Compiling getrandom v0.3.3
Compiling untrusted v0.9.0
Compiling http v1.3.1
Compiling base64ct v1.8.0
Compiling ident_case v1.0.1
Compiling strsim v0.11.1
Compiling ppv-lite86 v0.2.21
Compiling cookie v0.18.1
Compiling semver v1.0.26
Compiling ryu v1.0.20
Compiling serde_json v1.0.142
Compiling thiserror v1.0.69
Compiling thiserror v2.0.12
Compiling num-integer v0.1.46
Compiling pem-rfc7468 v0.7.0
Compiling proc-macro2-diagnostics v0.10.1
Compiling tower-service v0.3.3
Compiling time v0.3.41
Compiling cpufeatures v0.2.17
Compiling ring v0.17.14
Compiling openssl-sys v0.9.109
Compiling try-lock v0.2.5
Compiling openssl v0.10.73
Compiling want v0.3.1
Compiling der v0.7.10
Compiling yansi v1.0.1
Compiling foreign-types-shared v0.1.1
Compiling base64 v0.22.1
Compiling foreign-types v0.3.2
Compiling ahash v0.8.12
Compiling rustls-pki-types v1.12.0
Compiling http-body v1.0.1
Compiling rand_chacha v0.3.1
Compiling zstd-sys v2.0.15+zstd.1.5.7
Compiling openssl-probe v0.1.6
Compiling hmac v0.12.1
Compiling rand v0.8.5
Compiling crossbeam-utils v0.8.21
Compiling atomic-waker v1.1.2
Compiling rustls v0.23.31
Compiling ipnet v2.11.0
Compiling byteorder v1.5.0
Compiling spin v0.9.8
Compiling base64 v0.21.7
Compiling spki v0.7.3
Compiling num-bigint v0.4.6
Compiling pkcs8 v0.10.2
Compiling mime v0.3.17
Compiling winnow v0.7.12
Compiling crc32fast v1.5.0
Compiling ref-cast v1.0.24
Compiling synstructure v0.13.2
Compiling darling_core v0.20.11
Compiling native-tls v0.2.14
Compiling iana-time-zone v0.1.63
Compiling alloc-no-stdlib v2.0.4
Compiling zstd-safe v7.2.4
Compiling alloc-stdlib v0.2.2
Compiling hashbrown v0.14.5
Compiling encoding_rs v0.8.35
Compiling adler2 v2.0.1
Compiling data-encoding v2.9.0
Compiling either v1.15.0
Compiling minimal-lexical v0.2.1
Compiling nom v7.1.3
Compiling miniz_oxide v0.8.9
Compiling brotli-decompressor v5.0.0
Compiling serde_derive v1.0.219
Compiling zerofrom-derive v0.1.6
Compiling displaydoc v0.2.5
Compiling yoke-derive v0.8.0
Compiling tokio-macros v2.5.0
Compiling zerovec-derive v0.11.1
Compiling futures-macro v0.3.31
Compiling tracing-attributes v0.1.30
Compiling darling_macro v0.20.11
Compiling zerofrom v0.1.6
Compiling tokio v1.47.1
Compiling yoke v0.8.0
Compiling thiserror-impl v1.0.69
Compiling zerotrie v0.2.2
Compiling futures-util v0.3.31
Compiling darling v0.20.11
Compiling thiserror-impl v2.0.12
Compiling openssl-macros v0.1.1
Compiling zerovec v0.11.4
Compiling pear_codegen v0.2.9
Compiling ref-cast-impl v1.0.24
Compiling tracing v0.1.41
Compiling rustls-native-certs v0.8.1
Compiling signature v2.2.0
Compiling ff v0.13.1
Compiling sync_wrapper v1.0.2
Compiling tinystr v0.8.1
Compiling potential_utf v0.1.2
Compiling psl-types v2.0.11
Compiling icu_collections v2.0.0
Compiling pastey v0.1.0
Compiling icu_locale_core v2.0.0
Compiling base16ct v0.2.0
Compiling tower-layer v0.3.3
Compiling heck v0.5.0
Compiling litrs v0.4.2
Compiling sec1 v0.7.3
Compiling icu_provider v2.0.0
Compiling document-features v0.2.11
Compiling http v0.2.12
Compiling icu_normalizer v2.0.0
Compiling icu_properties v2.0.1
Compiling futures-executor v0.3.31
Compiling futures v0.3.31
Compiling group v0.13.0
Compiling flate2 v1.1.2
Compiling rusticata-macros v4.1.0
Compiling brotli v8.0.1
Compiling async-trait v0.1.88
Compiling asn1-rs-derive v0.5.1
Compiling asn1-rs-impl v0.2.0
Compiling idna_adapter v1.2.1
Compiling idna v1.0.3
Compiling lazy_static v1.5.0
Compiling indexmap v2.10.0
Compiling url v2.5.4
Compiling chrono v0.4.41
Compiling uuid v1.17.0
Compiling tokio-util v0.7.16
Compiling tower v0.5.2
Compiling tokio-native-tls v0.3.1
Compiling publicsuffix v2.3.0
Compiling hkdf v0.12.4
Compiling webpki-roots v1.0.2
Compiling http-body-util v0.1.3
Compiling sha2 v0.10.9
Compiling rand_core v0.9.3
Compiling crypto-bigint v0.5.5
Compiling h2 v0.4.12
Compiling is-terminal v0.4.16
Compiling uncased v0.9.10
Compiling iri-string v0.7.8
Compiling siphasher v1.0.1
Compiling rustls v0.21.12
Compiling rustix v1.0.8
Compiling fastrand v2.3.0
Compiling devise_core v0.4.2
Compiling rand_chacha v0.9.0
Compiling elliptic-curve v0.13.8
Compiling cookie_store v0.21.1
Compiling rustls-webpki v0.103.4
Compiling rustls-webpki v0.101.7
Compiling sct v0.7.1
Compiling asn1-rs v0.6.2
Compiling serde_urlencoded v0.7.1
Compiling tower-http v0.6.6
Compiling serde_spanned v0.6.9
Compiling toml_datetime v0.6.11
Compiling http-body v0.4.6
Compiling rustc_version v0.4.1
Compiling sha1 v0.10.6
Compiling psm v0.1.26
Compiling libsqlite3-sys v0.35.0
Compiling socket2 v0.5.10
Compiling httpdate v1.0.3
Compiling linux-raw-sys v0.9.4
Compiling toml_write v0.1.2
Compiling inlinable_string v0.1.15
Compiling oid-registry v0.7.1
Compiling ucd-trie v0.1.7
Compiling hyper v1.6.0
Compiling unicode-xid v0.2.6
Compiling hyper v0.14.32
Compiling pear v0.2.9
Compiling pest v2.8.1
Compiling phf_shared v0.11.3
Compiling toml_parser v1.0.2
Compiling toml_edit v0.22.27
Compiling hyper-util v0.1.16
Compiling base64urlsafedata v0.5.2
Compiling curve25519-dalek v4.1.3
Compiling devise_codegen v0.4.2
Compiling rand v0.9.2
Compiling tokio-rustls v0.26.2
Compiling toml_datetime v0.7.0
Compiling serde_spanned v1.0.0
Compiling stable-pattern v0.1.0
Compiling rfc6979 v0.4.0
Compiling mysqlclient-sys v0.4.7
Compiling stacker v0.1.21
Compiling num_cpus v1.17.0
Compiling bigdecimal v0.4.8
Compiling hyper-rustls v0.27.7
Compiling hyper-tls v0.6.0
Compiling figment v0.10.19
Compiling multer v3.1.0
Compiling signal-hook v0.3.18
Compiling pq-sys v0.7.2
Compiling webauthn-attestation-ca v0.5.2
Compiling toml_writer v1.0.2
Compiling paste v1.0.15
Compiling state v0.6.0
Compiling num-bigint-dig v0.8.4
Compiling toml v0.9.5
error: failed to run custom build command for `webauthn-attestation-ca v0.5.2`
Caused by:
process didn't exit successfully: `/root/vaultwarden/target/release/build/webauthn-attestation-ca-efe966c80d1e94b4/build-script-build` (exit status: 101)
--- stdout
Your version of OpenSSL is out of date, and not supported by this library.
Please upgrade to OpenSSL v3.0.0 or later.
More info: https://github.com/kanidm/webauthn-rs/blob/master/OpenSSL.md
OpenSSL version string: 269488511
--- stderr
thread 'main' panicked at /root/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/webauthn-attestation-ca-0.5.2/build.rs:24:13:
The installed version of OpenSSL is unusable.
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
warning: build failed, waiting for other jobs to finish...
[ERROR] in line 53: exit code 0: while executing command $STD cargo build --features "sqlite,mysql,postgresql" --release
Screenshots or Videos
No response
Additional Context
I initially wrote an issue on the GitHub Repo of the community script (community-scripts/ProxmoxVE#6821).