-
Notifications
You must be signed in to change notification settings - Fork 845
Open
Description
Several functions are going to be deprecated since OpenSSL 3.0. It's still buildable by tweaking compile options but should be fixed sooner rather than later.
Last check was done with OpenSSL maser (b971d4198def0b29654e8fbf7987f7157741aed2) on Jan 5 2022.
- Core
- SHA256_Init/Update/Final (Use OpeSSL EVP API instead of SHA256_Init/Update/Final #7342)
- ERR_get_error_line_data (Use ERR_get_error_all if available #7354)
- ENGINE API (e.g. ENGINE_get_default_RSA)
- HMAC API (e.g. HMAC_Init_ex) (Use EVP MAC API if available #7363)
- DH API (e.g. DH_new, DH_get_2048_256)
- PEM_read_bio_DHparams
- SSL_get_peer_certificate (Use SSL_get1_peer_certificate on OpenSSL3 build #9460)
- Plugins
- SHA1_Init/Update/Final (cache_promote, prefetch) (Use OpenSSL EVP API if SHA1 API is not available (cache_promote) #7447, Use OpenSSL EVP API if SHA1 API is not available (prefetch) #7448)
- MD5 (certifier, ja3_fingerprint)
- HMAC API (s3_auth, access_control) (Use EVP API instead of legacy APIs (s3 auth) #7449)
- SHA256_Init/Update/Final (s3_auth, metalink) (Use EVP API instead of legacy APIs (s3 auth) #7449)
- Examples
- MD5 (secure_link) (Use EVP API instead of MD5_Init/Update/Final (secure_link plugin) #7355)
- Tests
- ENGINE API (tools/plugins/async_engine)
These below may be temporal issues
-
OCSP_REQ_CTX_add1_header and OCSP_REQ_CTX_free are undefined (not deprecated, maybe a bug on OpenSSL side)
cukiernik