Skip to content

Deprecated OpenSSL functions #5562

@hdu-sdlzx

Description

@hdu-sdlzx

Problem:

OpenSSL 3.0 deprecates some APIs used by aws-sdk-cpp, e.g. EVP_MD_CTX_md.
As a result, aws-sdk-cpp failed to build with OpenSSL configured with "no-deprecated".

build log:
09:22:02 /hdd/jenkins/workspace/aws/crt/aws-crt-cpp/crt/s2n/crypto/s2n_hash.c:205:22: error: implicit declaration of function ‘EVP_MD_CTX_md’; did you mean ‘EVP_MD_CTX_dup’? [-Wimplicit-function-declaration]
09:22:02 205 | POSIX_ENSURE_REF(EVP_MD_CTX_md(state->digest.high_level.evp.ctx));
09:22:02 | ^~~~~~~~~~~~~

Need By Date:

N/A

Solution:

Update OpenSSL APIs, no visible change to s2n users.

Requirements / Acceptance Criteria:

What must a solution address in order to solve the problem? How do we know the solution is complete?

  • RFC links: Links to relevant RFC(s)
  • Related Issues: Link any relevant issues
  • Will the Usage Guide or other documentation need to be updated?
  • No
  • Testing: How will this change be tested? Call out new integration tests, functional tests, or particularly interesting/important unit tests.
  • Existing test cases should be enough to test this change.
    • Will this change trigger SAW changes? Changes to the state machine, the s2n_handshake_io code that controls state transitions, the DRBG, or the corking/uncorking logic could trigger SAW failures.
    • No
    • Should this change be fuzz tested? Will it handle untrusted input? Create a separate issue to track the fuzzing work.
    • No

Out of scope:

Is there anything the solution will intentionally NOT address?
No

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions