Bug 2325868

Summary:	openssl-devel-engine is not available for EPEL
Product:	[Fedora] Fedora	Reporter:	Fabian Affolter <mail>
Component:	openssl	Assignee:	Dmitry Belyavskiy <dbelyavs>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	cllang, crypto-team, dbelyavs, mspacek, mturk, shebburn, suraj.ghimire7, tm
Target Milestone:	---	Flags:	fedora-admin-xmlrpc: mirror+
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-11-13 12:10:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2312457

Description Fabian Affolter 2024-11-13 08:18:04 UTC

As far as I can tell openssl-devel-engine is only available for Fedora. openssl-devel-engine would be needed for EPEL as well.

Would be much appreciated if you would consider this. Thanks. 

Reproducible: Always

Comment 1 Clemens Lang 2024-11-13 12:10:47 UTC

We are not planning to provide headers for ENGINE functionality in CentOS 10 Stream or RHEL 10.
Packages in EPEL should not use ENGINE functionality when targeting RHEL 10, CentOS 10 Stream or derived distributions.

For that reason, OpenSSL as shipped in CentOS 10 Stream defines the OPENSSL_NO_ENGINE preprocessor symbol indicating that it was compiled without support for engines.

See also https://issues.redhat.com/browse/RHEL-58344 where this has been previously discussed and https://issues.redhat.com/browse/RHEL-58178, which should improve the situation to the point where packages either build without ENGINE support out of the box, or need upstream fixes to respect OPENSSL_NO_ENGINE anyway.