From: Willy Tarreau <w@1wt.eu>
Date: Mon, 11 Apr 2022 14:31:31 +0000 (+0200)
Subject: BUILD: makefile: silence unbearable OpenSSL deprecation warnings
X-Git-Tag: v2.6-dev6~140
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=6ea6ed74188f2438707536548aaf8a35a96b484c;p=thirdparty%2Fhaproxy.git

BUILD: makefile: silence unbearable OpenSSL deprecation warnings

OpenSSL 3.0 emits tons of deprecation warnings for the engine API, and
it becomes a real problem because these hide other real warnings and
will prevent distros from building with -Werror. Fortunately there's a
macro to shut this one, OPENSSL_SUPPRESS_DEPRECATED, that is sufficient
to get things back to normal, so let's define it when USE_ENGINE is set.
This way we still get a chance to see other deprecation warnings when
engines are not used.
---

diff --git a/Makefile b/Makefile
index fc0ae67bab..026e334c6c 100644
--- a/Makefile
+++ b/Makefile
@@ -623,6 +623,15 @@ OPTIONS_LDFLAGS += -ldl
 endif
 OPTIONS_OBJS  += src/ssl_sample.o src/ssl_sock.o src/ssl_crtlist.o src/ssl_ckch.o src/ssl_utils.o src/cfgparse-ssl.o src/jwt.o
 endif
+
+ifneq ($(USE_ENGINE),)
+# OpenSSL 3.0 emits loud deprecation warnings by default when building with
+# engine support, and this option is made to silence them. Better use it
+# only when absolutely necessary, until there's a viable alternative to the
+# engine API.
+OPTIONS_CFLAGS += -DOPENSSL_SUPPRESS_DEPRECATED
+endif
+
 ifneq ($(USE_QUIC),)
 OPTIONS_OBJS += src/quic_sock.o src/proto_quic.o src/xprt_quic.o src/quic_tls.o \
                 src/quic_frame.o src/quic_cc.o src/quic_cc_newreno.o src/mux_quic.o \