diff --git a/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool/0001-Makefile.am-do-not-use-Werror.patch b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool/0001-Makefile.am-do-not-use-Werror.patch
new file mode 100644
index 0000000..5bb2dc4
--- /dev/null
+++ b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool/0001-Makefile.am-do-not-use-Werror.patch
@@ -0,0 +1,31 @@
+From 06c9f0846f98b8ad92285b422199438f02c7bfdf Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Wed, 20 Oct 2021 15:31:05 +0800
+Subject: [PATCH] Makefile.am: do not use -Werror
+
+Do not use -Werror to disable openssl 3.0 deprecation warnings turning
+into errors.
+
+Upstream-Status: Pending
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ src/Makefile.am | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/Makefile.am b/src/Makefile.am
+index a3257fa..784b061 100644
+--- a/src/Makefile.am
++++ b/src/Makefile.am
+@@ -7,7 +7,7 @@ AM_CFLAGS = -Wall -Wextra --std=gnu99
+ common_SOURCES = idc.c idc.h image.c image.h fileio.c fileio.h \
+ 	../lib/ccan.git/ccan/read_write_all/read_write_all.c efivars.h $(coff_headers)
+ common_LDADD = ../lib/ccan/libccan.a $(libcrypto_LIBS)
+-common_CFLAGS = -I$(top_srcdir)/lib/ccan/ -Werror
++common_CFLAGS = -I$(top_srcdir)/lib/ccan/
+ 
+ sbsign_SOURCES = sbsign.c $(common_SOURCES)
+ sbsign_LDADD = $(common_LDADD)
+-- 
+2.17.1
+
diff --git a/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
index e19d34f..7fa841c 100644
--- a/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
+++ b/meta-signing-key/recipes-devtools/sbsigntool/sbsigntool_git.bb
@@ -18,6 +18,7 @@ SRC_URI = " \
     file://0003-sbsign-add-x-option-to-avoid-overwrite-existing-sign.patch  \
     file://0001-src-Makefile.am-Add-read_write_all.c-to-common_SOURC.patch \
     file://0001-fileio.c-initialize-local-variables-before-use-in-fu.patch \
+    file://0001-Makefile.am-do-not-use-Werror.patch \
 "
 SRCREV_sbsigntools  ?= "f12484869c9590682ac3253d583bf59b890bb826"
 SRCREV_ccan         ?= "b1f28e17227f2320d07fe052a8a48942fe17caa5"