Page MenuHomeFreeBSD

bhyve: specify OpenSSL 1.1 API
ClosedPublic

Authored by emaste on May 8 2023, 12:13 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Mar 16, 7:59 AM
Unknown Object (File)
Wed, Mar 13, 5:58 PM
Unknown Object (File)
Feb 27 2024, 7:23 AM
Unknown Object (File)
Jan 11 2024, 2:59 PM
Unknown Object (File)
Dec 30 2023, 11:14 PM
Unknown Object (File)
Dec 20 2023, 8:27 AM
Unknown Object (File)
Dec 20 2023, 12:15 AM
Unknown Object (File)
Nov 30 2023, 10:57 PM

Details

Summary
OPENSSL_API_COMPAT can be used to specify the OpenSSL API version in
use, and hide interfaces that are deprecated in that version.  This is
a NFC while we're using OpenSSL 1.1.1 but will avoid deprecation
warnings when be switch to OpenSSL 3.0.  A future change can switch to
OpenSSL 3.0 APIs.

Sponsored by:   The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

My thinking here is that we can add this #define to all of the software using APIs deprecated in OpenSSL 3.0 and later (which includes, dma, decryptcore, auditdistd, etc.).

jhb added a subscriber: jhb.

I think that approach is fine for now, and it lets us stage things into the tree more gracefully.

This revision is now accepted and ready to land.May 8 2023, 6:18 PM
This revision was automatically updated to reflect the committed changes.