From: Tasmiya Nalatwad <tasmiya@linux.vnet.ibm.com>
To: linux-kernel@vger.kernel.org
Cc: keyrings@vger.kernel.org, Adam Langley <agl@google.com>,
David Howells <dhowells@redhat.com>,
David Woodhouse <dwmw2@infradead.org>,
Kees Cook <keescook@chromium.org>,
Eric Biggers <ebiggers@kernel.org>,
abdhalee@linux.vnet.ibm.com, sachinp@linux.vnet.com,
mputtash@linux.vnet.com
Subject: OpenSSL's ENGINE API is deprecated in OpenSSL v3.0
Date: Mon, 23 May 2022 17:23:26 +0530 [thread overview]
Message-ID: <a1a2eaea-4483-68b0-352f-f7d357a4d14b@linux.vnet.ibm.com> (raw)
Greetings,
OpenSSL's ENGINE API is deprecated in OpenSSL v3.0
Console logs :
[console-expect]#make -j 17 -s && make modules && make modules_install
&& make install
make -j 17 -s && make modules && make modules_install && make install
scripts/sign-file.c: In function 'display_openssl_errors':
scripts/sign-file.c:89:2: warning: 'ERR_get_error_line' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
while ((e = ERR_get_error_line(&file, &line))) {
^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'drain_openssl_errors':
scripts/sign-file.c:102:2: warning: 'ERR_get_error_line' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
while (ERR_get_error_line(&file, &line)) {}
^~~~~
In file included from scripts/sign-file.c:29:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
scripts/sign-file.c: In function 'read_private_key':
scripts/sign-file.c:142:3: warning: 'ENGINE_load_builtin_engines' is
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_load_builtin_engines();
^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:358:28: note: declared here
OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
^~~~~~~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:144:3: warning: 'ENGINE_by_id' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
e = ENGINE_by_id("pkcs11");
^
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:336:31: note: declared here
OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
^~~~~~~~~~~~
scripts/sign-file.c:146:3: warning: 'ENGINE_init' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
if (ENGINE_init(e))
^~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:620:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
^~~~~~~~~~~
scripts/sign-file.c:151:4: warning: 'ENGINE_ctrl_cmd_string' is
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0),
^~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:479:5: note: declared here
int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char
*arg,
^~~~~~~~~~~~~~~~~~~~~~
scripts/sign-file.c:153:3: warning: 'ENGINE_load_private_key' is
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
private_key = ENGINE_load_private_key(e, private_key_name,
^~~~~~~~~~~
In file included from scripts/sign-file.c:30:0:
/usr/include/openssl/engine.h:638:11: note: declared here
EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id,
^~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'display_openssl_errors':
certs/extract-cert.c:46:2: warning: 'ERR_get_error_line' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
while ((e = ERR_get_error_line(&file, &line))) {
^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'drain_openssl_errors':
certs/extract-cert.c:59:2: warning: 'ERR_get_error_line' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
while (ERR_get_error_line(&file, &line)) {}
^~~~~
In file included from certs/extract-cert.c:23:0:
/usr/include/openssl/err.h:411:15: note: declared here
unsigned long ERR_get_error_line(const char **file, int *line);
^~~~~~~~~~~~~~~~~~
certs/extract-cert.c: In function 'main':
certs/extract-cert.c:124:3: warning: 'ENGINE_load_builtin_engines' is
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_load_builtin_engines();
^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:358:28: note: declared here
OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
^~~~~~~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:126:3: warning: 'ENGINE_by_id' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
e = ENGINE_by_id("pkcs11");
^
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:336:31: note: declared here
OSSL_DEPRECATEDIN_3_0 ENGINE *ENGINE_by_id(const char *id);
^~~~~~~~~~~~
certs/extract-cert.c:128:3: warning: 'ENGINE_init' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
if (ENGINE_init(e))
^~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:620:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_init(ENGINE *e);
^~~~~~~~~~~
certs/extract-cert.c:133:4: warning: 'ENGINE_ctrl_cmd_string' is
deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
ERR(!ENGINE_ctrl_cmd_string(e, "PIN", key_pass, 0), "Set PKCS#11 PIN");
^~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:479:5: note: declared here
int ENGINE_ctrl_cmd_string(ENGINE *e, const char *cmd_name, const char
*arg,
^~~~~~~~~~~~~~~~~~~~~~
certs/extract-cert.c:134:3: warning: 'ENGINE_ctrl_cmd' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
ENGINE_ctrl_cmd(e, "LOAD_CERT_CTRL", 0, &parms, NULL, 1);
^~~~~~~~~~~~~~~
In file included from certs/extract-cert.c:24:0:
/usr/include/openssl/engine.h:450:27: note: declared here
OSSL_DEPRECATEDIN_3_0 int ENGINE_ctrl_cmd(ENGINE *e, const char *cmd_name,
^~~~~~~~~~~~~~~
--
Regards,
Tasmiya Nalatwad
IBM Linux Technology Center
reply other threads:[~2022-05-23 11:54 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a1a2eaea-4483-68b0-352f-f7d357a4d14b@linux.vnet.ibm.com \
--to=tasmiya@linux.vnet.ibm.com \
--cc=abdhalee@linux.vnet.ibm.com \
--cc=agl@google.com \
--cc=dhowells@redhat.com \
--cc=dwmw2@infradead.org \
--cc=ebiggers@kernel.org \
--cc=keescook@chromium.org \
--cc=keyrings@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=mputtash@linux.vnet.com \
--cc=sachinp@linux.vnet.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®