OpenSSL 3

[garethsb]

OpenSSL 1.1.1 is end-of-life.

Updating to OpenSSL 3 is straightforward. No code changes are required. Some APIs have been deprecated, but we can follow the migration guide later.

For now the additional warnings are:

‘int SHA256_Init(SHA256_CTX*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
‘int SHA256_Update(SHA256_CTX*, const void*, size_t)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
‘int SHA256_Final(unsigned char*, SHA256_CTX*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
‘void RSA_free(RSA*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
‘void EC_KEY_free(EC_KEY*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
‘RSA* RSA_new()’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]

from just two source files:

• Development/nmos/authorization_operation.cpp
• Development/nmos/jwk_utils.cpp

I have also intentionally not updated the Ubuntu 14.04-based CI job from OpenSSL 1.1.1v.

nmos-cpp/.github/workflows/src/build-test.yml

Lines 161 to 162 in 5081f99

	# build and install openssl
	curl -OsSk https://www.openssl.org/source/openssl-1.1.1v.tar.gz

The Raspberry Pi instructions seem to rely on the https://github.com/openssl/openssl.git master branch?

[lo-simon]

LGTM