Suppress OpenSSL deprecated warnings from OpensSSL 3.0.0

We are not back porting OpenSSL 3.0.0 fixes to this branch so there
is no point in emitting warnings about using deprecated code.
Additionally this impacts --enable-developer and --enable-warn-error.

diff --git a/configure b/configure
index ed2d4869e579b043c67e580f3bc76380adac474e..27f95388e596a8839bfe9611c85bb27eea0dc888 100755 (executable)
--- a/configure
+++ b/configure
@@ -16849,6 +16849,14 @@ fi
 
 
 
+#
+# This maintenance branch of BIND 9 does not support new OpenSSL APIs
+# introduced in version 3.0.0.  Suppress compiler warnings about using
+# functions deprecated in newer OpenSSL versions as they will not be
+# addressed in BIND 9.16.
+#
+OPENSSL_CFLAGS="$OPENSSL_CFLAGS -DOPENSSL_SUPPRESS_DEPRECATED"
+
 CFLAGS="$CFLAGS $OPENSSL_CFLAGS"
 LIBS="$LIBS $OPENSSL_LIBS"
 

diff --git a/configure.ac b/configure.ac
index 287de41369f157e3568584ddcdc74f48b7afbd14..d11e0ca7264bdb5f2c4f7579e5ded7c639a96a3c 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -806,6 +806,14 @@ PKG_CHECK_MODULES([OPENSSL], [libssl libcrypto], [],
 
 AX_SAVE_FLAGS([openssl])
 
+#
+# This maintenance branch of BIND 9 does not support new OpenSSL APIs
+# introduced in version 3.0.0.  Suppress compiler warnings about using
+# functions deprecated in newer OpenSSL versions as they will not be
+# addressed in BIND 9.16.
+#
+OPENSSL_CFLAGS="$OPENSSL_CFLAGS -DOPENSSL_SUPPRESS_DEPRECATED"
+
 CFLAGS="$CFLAGS $OPENSSL_CFLAGS"
 LIBS="$LIBS $OPENSSL_LIBS"