Fedora 41 drops OpenSSL ENGINE support, u-boot can't compile anymore.

Peter Robinson pbrobinson at gmail.com
Mon Nov 4 13:28:42 CET 2024


Hi Bas,

I am the Fedora U-Boot maintainer :)

> On compiling on Fedora 41 you will get the error:
>
> fatal error: openssl/engine.h: No such file or directory
>
> It was already legacy:
> https://docs.openssl.org/3.0/man7/migration_guide/#support-of-legacy-engines
>
> Fedora 41 has removed it:
> https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine

To be clear, it's been deprecated, not removed, this is because Engine
support upstream has been deprecated[1].

> So after updating to Fedora 41, I can't compile u-boot anymore. (I can
> compile it in a docker-container). But this will be a problem for more
> people.

You just need to install the openssl-devel-engine package as the
engine support has been split out in preparation for it being removed
in the future.

> The code that gives the problem is here added:
> https://patchwork.ozlabs.org/project/uboot/patch/20170106191417.6115-1-george.mccollister@gmail.com/

Upstream is replacing engines with providers, I believe there are
people looking into migrating the U-Boot code to use the provider
interface, but the name doesn't come to mind.

> On GitHub I have created a branch that can compile now. But this is my
> first c code in 20 years (only done this on my highschool for 3
> months).
>
> https://github.com/Opvolger/u-boot/tree/opensll-without-engine
>
> I think you can make a nicer/better solution.

[1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md


More information about the U-Boot mailing list