From: Vsevolod Stakhov <vsevolod@rspamd.com>
Date: Fri, 5 Dec 2025 14:32:37 +0000 (+0000)
Subject: [Fix] Remove deprecated OpenSSL engine.h include
X-Git-Tag: 3.14.2~31
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cc64f54229d406f68e12a32ec3ea9e27fb59228c;p=thirdparty%2Frspamd.git

[Fix] Remove deprecated OpenSSL engine.h include

OpenSSL ENGINE API was deprecated in 3.0 and the header is removed
in newer versions. In dkim.c it was unused; in ssl_util.c we now
conditionally include it only for OpenSSL versions that need it.
---

diff --git a/src/libserver/dkim.c b/src/libserver/dkim.c
index 67a6edf4f7..1816804593 100644
--- a/src/libserver/dkim.c
+++ b/src/libserver/dkim.c
@@ -28,7 +28,6 @@
 #include <openssl/err.h>
 #include <openssl/evp.h>
 #include <openssl/rsa.h>
-#include <openssl/engine.h>
 
 /* special DNS tokens */
 #define DKIM_DNSKEYNAME "_domainkey"
diff --git a/src/libserver/ssl_util.c b/src/libserver/ssl_util.c
index 78d1c02a76..c10a869dd8 100644
--- a/src/libserver/ssl_util.c
+++ b/src/libserver/ssl_util.c
@@ -30,8 +30,11 @@
 #include <openssl/rand.h>
 #include <openssl/conf.h>
 #include <openssl/evp.h>
-#include <openssl/engine.h>
 #include <openssl/x509v3.h>
+/* ENGINE API is deprecated in OpenSSL 3.0 and removed in later versions */
+#if OPENSSL_VERSION_NUMBER >= 0x1000104fL && OPENSSL_VERSION_NUMBER < 0x30000000L && !defined(LIBRESSL_VERSION_NUMBER)
+#include <openssl/engine.h>
+#endif
 
 enum rspamd_ssl_state {
 	ssl_conn_reset = 0,