OpenSSL's ENGINE API is deprecated in OpenSSL v3.0

From: Tasmiya Nalatwad
Date: Mon May 23 2022 - 07:54:26 EST


Greetings,

OpenSSL's ENGINE API is deprecated in OpenSSL v3.0

Console logs :

[console-expect]#make -j 17 -s && make modules && make modules_install && make install
make -j 17 -s && make modules && make modules_install && make install
scripts/sign-file.c: In function 'display_openssl_errors':
scripts/sign-file.c:89:2: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
while ((e = ERR_get_error_line(&file, &line))) {
^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'drain_openssl_errors':
scripts/sign-file.c:102:2: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
while (ERR_get_error_line(&file, &line)) {}
^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'read_private_key':
scripts/sign-file.c:142:3: warning: 'ENGINE_load_builtin_engines' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_load_builtin_engines();
^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:358:28: note: declared here
OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
^~~~~~~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:144:3: warning: 'ENGINE_by_id' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
e = ENGINE_by_id("pkcs11");
^
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:336:31: note: declared here
OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
^~~~~~~~~~~~
scripts/sign-file.c:146:3: warning: 'ENGINE_init' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
if (ENGINE_init(e))
^~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:620:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
^~~~~~~~~~~
scripts/sign-file.c:151:4: warning: 'ENGINE_ctrl_cmd_string' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0),
^~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:479:5: note: declared here
int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char *arg,
^~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:153:3: warning: 'ENGINE_load_private_key' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
private_key = ENGINE_load_private_key(e, private_key_name,
^~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:638:11: note: declared here
EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
^~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'display_openssl_errors':
certs/extract-cert.c:46:2: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
while ((e = ERR_get_error_line(&file, &line))) {
^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'drain_openssl_errors':
certs/extract-cert.c:59:2: warning: 'ERR_get_error_line' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
while (ERR_get_error_line(&file, &line)) {}
^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'main':
certs/extract-cert.c:124:3: warning: 'ENGINE_load_builtin_engines' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_load_builtin_engines();
^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:358:28: note: declared here
OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
^~~~~~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:126:3: warning: 'ENGINE_by_id' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
e = ENGINE_by_id("pkcs11");
^
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:336:31: note: declared here
OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
^~~~~~~~~~~~
certs/extract-cert.c:128:3: warning: 'ENGINE_init' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
if (ENGINE_init(e))
^~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:620:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
^~~~~~~~~~~
certs/extract-cert.c:133:4: warning: 'ENGINE_ctrl_cmd_string' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0), "Set PKCS#11 PIN");
^~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:479:5: note: declared here
int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char *arg,
^~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:134:3: warning: 'ENGINE_ctrl_cmd' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_ctrl_cmd(e, "LOAD_CERT_CTRL", 0, &parms, NULL, 1);
^~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:450:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl_cmd(ENGINE *e, const char *cmd_name,
^~~~~~~~~~~~~~~

--
Regards,
Tasmiya Nalatwad
IBM Linux Technology Center