bneradt commented on issue #7512:
URL: https://github.com/apache/trafficserver/issues/7512#issuecomment-2560211090
When working through test and build updates needed to support fedora:41, I
ran into this Engine deprecation issue when building against fedora:41's system
openssl:
```
[356/1286] Building CXX object
src/iocore/net/CMakeFiles/inknet.dir/SSLUtils.cc.o
FAILED: src/iocore/net/CMakeFiles/inknet.dir/SSLUtils.cc.o
/usr/bin/ccache /usr/lib64/ccache/c++ -DDEBUG -DOPENSSL_API_COMPAT=10002
-DOPENSSL_IS_OPENSSL3 -DPACKAGE_NAME="\"Apache Traffic Server\""
-DPACKAGE_VERSION=\"10.1.0\" -D_DEBUG -Dlinux
-I/home/jenkins/trafficserver/include
-I/home/jenkins/trafficserver/build/include
-I/home/jenkins/trafficserver/lib/swoc/include
-I/home/jenkins/trafficserver/lib/yamlcpp/include -isystem
/home/jenkins/trafficserver/lib/systemtap -pthread -g -std=c++20
-Wno-invalid-offsetof -pipe -Wall -Wextra -Wno-noexcept-type -Wsuggest-override
-Wno-vla-extension -fno-strict-aliasing -Wno-format-truncation
-Wno-deprecated-declarations -mcx16 -Werror -MD -MT
src/iocore/net/CMakeFiles/inknet.dir/SSLUtils.cc.o -MF
src/iocore/net/CMakeFiles/inknet.dir/SSLUtils.cc.o.d -o
src/iocore/net/CMakeFiles/inknet.dir/SSLUtils.cc.o -c
/home/jenkins/trafficserver/src/iocore/net/SSLUtils.cc
/home/jenkins/trafficserver/src/iocore/net/SSLUtils.cc:69:10: fatal error:
openssl/engine.h: No such file or directory
69 | #include <openssl/engine.h>
| ^~~~~~~~~~~~~~~~~~
compilation terminated.
[361/1286] Building CXX object
src/iocore/net/CMakeFiles/inknet.dir/OCSPStapling.cc.o
ninja: build stopped: subcommand failed.
```
This fedora change is described here:
https://discussion.fedoraproject.org/t/f41-change-proposal-openssl-deprecate-engine-system-wide/111344
The `openssl` and `openssl-devel` packages no longer provide engine.h as a
part of fedora:41. They removed it because the engine.h API has been deprecated
since the beginning of OpenSSL 3.0. For the time being to unblock updating CI
to fedora:41, I'll install the `openssl-devel-engine` package for fedora:41.
But it would be good for us to transition off of the deprecated Engine API and
move toward the Provider API per @maskit's suggestion above.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
