Skip to content

Engine pkcs11 cannot work with OSSL_PARAM on OpenSSL 3.0

Petr Menšík requested to merge pemensik/bind9:bug/main/sha1-disabled-fedora-rhbz2122841 into main

Do not use OSSL_PARAM when engine API is compiled

OpenSSL has deprecated many things in version 3.0. If pkcs11 engine should work then no builder from OpenSSL 3.0 API can be used.

Allow switching to OpenSSL 1.1 like calls even on OpenSSL 3.0 when OPENSSL_API_COMPAT=10100 is defined. It would still compile and allow working keys loading from the engine passed on command line.

This change is required to pass with pkcs11 engine.

Closes #3578 (closed)

Edited by Michał Kępień

Merge request reports