Skip to content

Conversation

@jogme
Copy link
Contributor

@jogme jogme commented Nov 13, 2025

Resolves: openssl/project#1423

Checklist
  • documentation is added or updated
  • tests are added or updated

@t8m t8m added approval: review pending This pull request needs review by a committer triaged: documentation The issue/pr deals with documentation (errors) tests: exempted The PR is exempt from requirements for testing branch: feature The issue or PR is relevant only to one of the feature branches. labels Nov 13, 2025
CHANGES.md Outdated

*Ryan Hooper*

* The ENGINE feature was removed.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe at least add here (not in NEWS) that OPENSSL_NO_ENGINE is always defined.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PTAL

CHANGES.md Outdated

*Ryan Hooper*

* The ENGINE feature was removed.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this deserves a bigger entry than just this. We should describe the fact that all ENGINE_* APIs have been removed as a result. We should tell users what they should do about it (transition to providers, change their application to not call ENGINE_* APIs any more, or possibly use the stubs if necessary).

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PTAL

@mbroz mbroz linked an issue Nov 13, 2025 that may be closed by this pull request
@jogme jogme force-pushed the engine_removal_changelog branch from 4d6a6e9 to 8110dec Compare November 13, 2025 14:44
CHANGES.md Outdated
Comment on lines 49 to 53
* Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined.
`ENGINE_` prefixed functions should be removed from any source code.
When it is not possible right away, the macro `OPENSSL_ENGINE_STUB`
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any. Use provider API instead of ENGINEs.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
* Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined.
`ENGINE_` prefixed functions should be removed from any source code.
When it is not possible right away, the macro `OPENSSL_ENGINE_STUB`
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any. Use provider API instead of ENGINEs.
* Removed engines. The `no-engine` option is always present when configuring and
* the `OPENSSL_NO_ENGINE` define is always set when building.
All `ENGINE_` prefixed functions have also been removed from the source code.
Provider APIs should be used to provide functionality similar to what engines used to.

This part

When it is not possible right away, the macro OPENSSL_ENGINE_STUB
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any.

Should be modified to past tense and added when it is done.

Copy link
Member

@t8m t8m Nov 14, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This part

When it is not possible right away, the macro OPENSSL_ENGINE_STUB
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any.

Should be modified to past tense and added when it is done.

It is already done. This is an instruction to user.

Suggested change
* Removed ENGINE feature. `OPENSSL_NO_ENGINE` will always be defined.
`ENGINE_` prefixed functions should be removed from any source code.
When it is not possible right away, the macro `OPENSSL_ENGINE_STUB`
might be used to silence compilation errors, but it will leave the user
with broken ENGINE usage if any. Use provider API instead of ENGINEs.
* ENGINE support was removed. The `no-engine` build option and the
`OPENSSL_NO_ENGINE` macro is always present.
Applications using `ENGINE_` functions that do not check the presence
of `OPENSSL_NO_ENGINE` can be built by defining a macro
`OPENSSL_ENGINE_STUBS`, however all these functions will return error
if called. Provider API needs to be used to replace engines functionality.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note that this is going to the feature branch

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I reworded your suggestion a little. PTAL

Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>
@jogme jogme force-pushed the engine_removal_changelog branch from be04fe7 to ff1081b Compare November 14, 2025 12:21
@t8m t8m requested review from mattcaswell and paulidale November 14, 2025 16:47
@jogme jogme added approval: done This pull request has the required number of approvals and removed approval: review pending This pull request needs review by a committer labels Nov 18, 2025
@openssl-machine openssl-machine added approval: ready to merge The 24 hour grace period has passed, ready to merge and removed approval: done This pull request has the required number of approvals labels Nov 19, 2025
@openssl-machine
Copy link
Collaborator

This pull request is ready to merge

@t8m
Copy link
Member

t8m commented Nov 19, 2025

Merged to the feature branch. Thank you.

@t8m t8m closed this Nov 19, 2025
openssl-machine pushed a commit that referenced this pull request Nov 19, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from #29138)
Sashan pushed a commit to jogme/openssl that referenced this pull request Nov 30, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
mbroz pushed a commit to mbroz/openssl that referenced this pull request Dec 1, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
nhorman pushed a commit to nhorman/openssl that referenced this pull request Dec 1, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
nhorman pushed a commit to nhorman/openssl that referenced this pull request Dec 1, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
mbroz pushed a commit to mbroz/openssl that referenced this pull request Dec 4, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
nhorman pushed a commit to nhorman/openssl that referenced this pull request Dec 4, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
mbroz pushed a commit to mbroz/openssl that referenced this pull request Dec 4, 2025
Resolves: openssl/project#1423

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Paul Yang <paulyang.inf@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from openssl#29138)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approval: ready to merge The 24 hour grace period has passed, ready to merge branch: feature The issue or PR is relevant only to one of the feature branches. tests: exempted The PR is exempt from requirements for testing triaged: documentation The issue/pr deals with documentation (errors)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add CHANGES.md and NEWS.md entry for ENGINE removal

6 participants