Yes, the external crypto engine support will not work anymore for OpenSSL 3.x, needs
probably more analysis from the mentioned author. Even if we would do the refactoring to
the new methods, without access to test devices its difficult to verify.
About the random number generator topics, they are also deprecated in the OpenSSL 3.x as
shown above. But as they were added just to work around for some limitation/bugs in
OpenSSL 1.x, it probably make sense to try to deactivate them as well. Maybe they are not
needed anymore.
If we still need them, we need probably refactor them to use the
[
RAND_set_DRBG_type(3)](https://www.openssl.org/docs/man3.1/man3/RAND_set_DR…,
[
EVP_RAND(3)](https://www.openssl.org/docs/man3.1/man3/EVP_RAND.html) and
[
EVP_RAND(7)](https://www.openssl.org/docs/man3.1/man7/EVP_RAND.html) functions.
--
Reply to this email directly or view it on GitHub:
https://github.com/kamailio/kamailio/issues/3484#issuecomment-1597226952
You are receiving this because you commented.
Message ID: <kamailio/kamailio/issues/3484/1597226952(a)github.com>