Hi Neal,

> On 22. Jul 2024, at 15:01, Neal Gompa <ngomp...@gmail.com> wrote:
> 
> The CentOS approach isn't a deprecation, it's flat out removal. It's a
> completely different change.

This isn’t correct. The headers are removed, but the ABI is still present in 
CentOS Stream, so it is not flat out removal.

For Fedora, we could change this to keep the headers and the binary support 
present, but define `OPENSSL_NO_ENGINE` unless a special preprocessor define 
overrides it.


> Is anyone helping to migrate users of the engine API to newer APIs? If
> that's not happening, then there's no way to support removing the
> engine API from Fedora's OpenSSL.

We’re happy to help maintainers that want to do this. We may do it ourselves 
for selected components. We will not fix every single use ourselves.


-- 
Clemens Lang
RHEL Crypto Team
Red Hat



-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to