Skip to content

Switch OpenSSL APIs to avoid ENGINE use#13350

Draft
JosiahWI wants to merge 6 commits into
apache:masterfrom
JosiahWI:feat/openssl3-no-engine
Draft

Switch OpenSSL APIs to avoid ENGINE use#13350
JosiahWI wants to merge 6 commits into
apache:masterfrom
JosiahWI:feat/openssl3-no-engine

Conversation

@JosiahWI

Copy link
Copy Markdown
Contributor

Waiting on #13349.

Resolves #13347

JosiahWI added 6 commits June 29, 2026 17:18
Fixes apache#13347

This patch changes the implementation of `SSLPrivateKeyHandler` to use
`SSL_CTX_use_RSAPrivateKey_file` instead of `ENGINE_` APIs, since those
APIs are deprecated in OpenSSL 3.x.
* Rename `load_xxx` to `use_xxx`
* Push `Dbg` message back to `SSLPrivateKeyHandler`
* Move `use_xxx` functions to SSLKeyUtils.{h,cc}
@JosiahWI JosiahWI self-assigned this Jun 30, 2026
@JosiahWI JosiahWI added the SSL label Jun 30, 2026
@JosiahWI JosiahWI added this to the 11.0.0 milestone Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove remaining deprecated OpenSSL 3.0 APIs in SSLUtils.cc (DH and ENGINE)

1 participant