On Tue, Apr 2, 2024 at 3:12 PM Dmitry Belyavskiy <dbelyavs@xxxxxxxxxx> wrote: > Third-party engines may be a problem but as we don't break ABI, it's not a problem of the moment. The fact you are removing the headers means it is a problem for 3rd party engines who build from source (and everyone should at least occasionally be building from source as part of their CI). I consider removing the headers as breaking the API, as the headers define the API. The headers already mark the engine APIs as deprecated. Orgs with resources should be starting their migration, although some will defer it to the next quarter (and the next....) I expect you have no visibility into 3rd party engines, nor how big an issue this will be (and can make no statistically valid claim it will not be an issue unless you have real numbers to share). However, *after* RHEL10 is released with engine support removed RH's TAMs may have a better idea (I am WAGing most 3rd party engines will be being used by large customers, and they are likely to make any concerns known). I believe this should be part of OpenSSL 4.0. It will be a clear change. There is no compelling reason for this to happen today via the headers. Instead this should be a marketing campaign by OpenSSL to remind everyone that engines are going away with OpenSSL 4.0 with every new set of release notes (first item, in double bold), and that orgs need to start their migration. And then do it again. And then do it again. And when OpenSSL 4.0 is released, you can remind everyone you warned them. -- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue