Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

[Bas Magré]

On compiling on Fedora 41 you will get the error:

fatal error: openssl/engine.h: No such file or directory

It was already legacy:
https://docs.openssl.org/3.0/man7/migration_guide/#support-of-legacy-engines

Fedora 41 has removed it:
https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine

So after updating to Fedora 41, I can't compile u-boot anymore. (I can
compile it in a docker-container). But this will be a problem for more
people.

The code that gives the problem is here added:
https://patchwork.ozlabs.org/project/uboot/patch/20170106191417.6115-1-george.mccollister@gmail.com/

On GitHub I have created a branch that can compile now. But this is my
first c code in 20 years (only done this on my highschool for 3
months).

https://github.com/Opvolger/u-boot/tree/opensll-without-engine

I think you can make a nicer/better solution.

Greetings Bas.

Re: Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

[Fabio Estevam]

Adding George and Tom.

On Mon, Nov 4, 2024 at 12:30 AM Bas Magré <bas@opvolger.net> wrote:
>
> On compiling on Fedora 41 you will get the error:
>
> fatal error: openssl/engine.h: No such file or directory
>
> It was already legacy:
> https://docs.openssl.org/3.0/man7/migration_guide/#support-of-legacy-engines
>
> Fedora 41 has removed it:
> https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
>
> So after updating to Fedora 41, I can't compile u-boot anymore. (I can
> compile it in a docker-container). But this will be a problem for more
> people.
>
> The code that gives the problem is here added:
> https://patchwork.ozlabs.org/project/uboot/patch/20170106191417.6115-1-george.mccollister@gmail.com/
>
> On GitHub I have created a branch that can compile now. But this is my
> first c code in 20 years (only done this on my highschool for 3
> months).
>
> https://github.com/Opvolger/u-boot/tree/opensll-without-engine
>
> I think you can make a nicer/better solution.
>
> Greetings Bas.
>

Re: Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

[Quentin Schulz]

Hi all,

On 11/4/24 12:56 PM, Fabio Estevam wrote:
> Adding George and Tom.
> 
> On Mon, Nov 4, 2024 at 12:30 AM Bas Magré <bas@opvolger.net> wrote:
>>
>> On compiling on Fedora 41 you will get the error:
>>
>> fatal error: openssl/engine.h: No such file or directory
>>

dnf install openssl-devel-engine

Cheers,
Quentin

Re: Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

[Peter Robinson]

Hi Bas,

I am the Fedora U-Boot maintainer :)

> On compiling on Fedora 41 you will get the error:
>
> fatal error: openssl/engine.h: No such file or directory
>
> It was already legacy:
> https://docs.openssl.org/3.0/man7/migration_guide/#support-of-legacy-engines
>
> Fedora 41 has removed it:
> https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine

To be clear, it's been deprecated, not removed, this is because Engine
support upstream has been deprecated[1].

> So after updating to Fedora 41, I can't compile u-boot anymore. (I can
> compile it in a docker-container). But this will be a problem for more
> people.

You just need to install the openssl-devel-engine package as the
engine support has been split out in preparation for it being removed
in the future.

> The code that gives the problem is here added:
> https://patchwork.ozlabs.org/project/uboot/patch/20170106191417.6115-1-george.mccollister@gmail.com/

Upstream is replacing engines with providers, I believe there are
people looking into migrating the U-Boot code to use the provider
interface, but the name doesn't come to mind.

> On GitHub I have created a branch that can compile now. But this is my
> first c code in 20 years (only done this on my highschool for 3
> months).
>
> https://github.com/Opvolger/u-boot/tree/opensll-without-engine
>
> I think you can make a nicer/better solution.

[1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md