-
-
Notifications
You must be signed in to change notification settings - Fork 11k
Mention ENGINE removal in CHANGES and NEWS #29138
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Mention ENGINE removal in CHANGES and NEWS #29138
Conversation
CHANGES.md
Outdated
|
|
||
| *Ryan Hooper* | ||
|
|
||
| * The ENGINE feature was removed. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe at least add here (not in NEWS) that OPENSSL_NO_ENGINE is always defined.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
PTAL
CHANGES.md
Outdated
|
|
||
| *Ryan Hooper* | ||
|
|
||
| * The ENGINE feature was removed. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this deserves a bigger entry than just this. We should describe the fact that all ENGINE_* APIs have been removed as a result. We should tell users what they should do about it (transition to providers, change their application to not call ENGINE_* APIs any more, or possibly use the stubs if necessary).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
PTAL
4d6a6e9 to
8110dec
Compare
CHANGES.md
Outdated
| * Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined. | ||
| `ENGINE_` prefixed functions should be removed from any source code. | ||
| When it is not possible right away, the macro `OPENSSL_ENGINE_STUB` | ||
| might be used to silence compilation errors, but it will leave the user | ||
| with broken ENGINE usage if any. Use provider API instead of ENGINEs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| * Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined. | |
| `ENGINE_` prefixed functions should be removed from any source code. | |
| When it is not possible right away, the macro `OPENSSL_ENGINE_STUB` | |
| might be used to silence compilation errors, but it will leave the user | |
| with broken ENGINE usage if any. Use provider API instead of ENGINEs. | |
| * Removed engines. The `no-engine` option is always present when configuring and | |
| * the `OPENSSL_NO_ENGINE` define is always set when building. | |
| All `ENGINE_` prefixed functions have also been removed from the source code. | |
| Provider APIs should be used to provide functionality similar to what engines used to. |
This part
When it is not possible right away, the macro
OPENSSL_ENGINE_STUB
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any.
Should be modified to past tense and added when it is done.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This part
When it is not possible right away, the macro
OPENSSL_ENGINE_STUB
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any.Should be modified to past tense and added when it is done.
It is already done. This is an instruction to user.
| * Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined. | |
| `ENGINE_` prefixed functions should be removed from any source code. | |
| When it is not possible right away, the macro `OPENSSL_ENGINE_STUB` | |
| might be used to silence compilation errors, but it will leave the user | |
| with broken ENGINE usage if any. Use provider API instead of ENGINEs. | |
| * ENGINE support was removed. The `no-engine` build option and the | |
| `OPENSSL_NO_ENGINE` macro is always present. | |
| Applications using `ENGINE_` functions that do not check the presence | |
| of `OPENSSL_NO_ENGINE` can be built by defining a macro | |
| `OPENSSL_ENGINE_STUBS`, however all these functions will return error | |
| if called. Provider API needs to be used to replace engines functionality. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Note that this is going to the feature branch
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I reworded your suggestion a little. PTAL
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org>
be04fe7 to
ff1081b
Compare
|
This pull request is ready to merge |
|
Merged to the feature branch. Thank you. |
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from #29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#29138)
Resolves: openssl/project#1423
Checklist