linux-kernel - OpenSSL's ENGINE API is deprecated in OpenSSL v3.0

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <a1a2eaea-4483-68b0-352f-f7d357a4d14b@linux.vnet.ibm.com>
Date:   Mon, 23 May 2022 17:23:26 +0530
From:   Tasmiya Nalatwad <tasmiya@...ux.vnet.ibm.com>
To:     linux-kernel@...r.kernel.org
Cc:     keyrings@...r.kernel.org, Adam Langley <agl@...gle.com>,
        David Howells <dhowells@...hat.com>,
        David Woodhouse <dwmw2@...radead.org>,
        Kees Cook <keescook@...omium.org>,
        Eric Biggers <ebiggers@...nel.org>,
        abdhalee@...ux.vnet.ibm.com, sachinp@...ux.vnet.com,
        mputtash@...ux.vnet.com
Subject: OpenSSL's ENGINE API is deprecated in OpenSSL v3.0

Greetings,

OpenSSL's ENGINE API is deprecated in OpenSSL v3.0

Console logs :

[console-expect]#make -j 17 -s && make modules && make modules_install 
&& make install
make -j 17 -s && make modules && make modules_install && make install
scripts/sign-file.c: In function 'display_openssl_errors':
scripts/sign-file.c:89:2: warning: 'ERR_get_error_line' is deprecated: 
Since OpenSSL 3.0 [-Wdeprecated-declarations]
   while ((e = ERR_get_error_line(&file, &line))) {
   ^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
  unsigned long ERR_get_error_line(const char **file, int *line);
                ^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'drain_openssl_errors':
scripts/sign-file.c:102:2: warning: 'ERR_get_error_line' is deprecated: 
Since OpenSSL 3.0 [-Wdeprecated-declarations]
   while (ERR_get_error_line(&file, &line)) {}
   ^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
  unsigned long ERR_get_error_line(const char **file, int *line);
                ^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'read_private_key':
scripts/sign-file.c:142:3: warning: 'ENGINE_load_builtin_engines' is 
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
    ENGINE_load_builtin_engines();
    ^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:358:28: note: declared here
  OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:144:3: warning: 'ENGINE_by_id' is deprecated: Since 
OpenSSL 3.0 [-Wdeprecated-declarations]
    e = ENGINE_by_id("pkcs11");
    ^
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:336:31: note: declared here
  OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
                                ^~~~~~~~~~~~
scripts/sign-file.c:146:3: warning: 'ENGINE_init' is deprecated: Since 
OpenSSL 3.0 [-Wdeprecated-declarations]
    if (ENGINE_init(e))
    ^~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:620:27: note: declared here
  OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
                            ^~~~~~~~~~~
scripts/sign-file.c:151:4: warning: 'ENGINE_ctrl_cmd_string' is 
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
     ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0),
     ^~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:479:5: note: declared here
  int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char 
*arg,
      ^~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:153:3: warning: 'ENGINE_load_private_key' is 
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
    private_key = ENGINE_load_private_key(e, private_key_name,
    ^~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:638:11: note: declared here
  EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
            ^~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'display_openssl_errors':
certs/extract-cert.c:46:2: warning: 'ERR_get_error_line' is deprecated: 
Since OpenSSL 3.0 [-Wdeprecated-declarations]
   while ((e = ERR_get_error_line(&file, &line))) {
   ^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
  unsigned long ERR_get_error_line(const char **file, int *line);
                ^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'drain_openssl_errors':
certs/extract-cert.c:59:2: warning: 'ERR_get_error_line' is deprecated: 
Since OpenSSL 3.0 [-Wdeprecated-declarations]
   while (ERR_get_error_line(&file, &line)) {}
   ^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
  unsigned long ERR_get_error_line(const char **file, int *line);
                ^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'main':
certs/extract-cert.c:124:3: warning: 'ENGINE_load_builtin_engines' is 
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
    ENGINE_load_builtin_engines();
    ^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:358:28: note: declared here
  OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:126:3: warning: 'ENGINE_by_id' is deprecated: Since 
OpenSSL 3.0 [-Wdeprecated-declarations]
    e = ENGINE_by_id("pkcs11");
    ^
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:336:31: note: declared here
  OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
                                ^~~~~~~~~~~~
certs/extract-cert.c:128:3: warning: 'ENGINE_init' is deprecated: Since 
OpenSSL 3.0 [-Wdeprecated-declarations]
    if (ENGINE_init(e))
    ^~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:620:27: note: declared here
  OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
                            ^~~~~~~~~~~
certs/extract-cert.c:133:4: warning: 'ENGINE_ctrl_cmd_string' is 
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
     ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0), "Set PKCS#11 PIN");
     ^~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:479:5: note: declared here
  int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char 
*arg,
      ^~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:134:3: warning: 'ENGINE_ctrl_cmd' is deprecated: 
Since OpenSSL 3.0 [-Wdeprecated-declarations]
    ENGINE_ctrl_cmd(e, "LOAD_CERT_CTRL", 0, &parms, NULL, 1);
    ^~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:450:27: note: declared here
  OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl_cmd(ENGINE *e, const char *cmd_name,
                            ^~~~~~~~~~~~~~~

-- 
Regards,
Tasmiya Nalatwad
IBM Linux Technology Center