[PATCH] Fix eapol_test build against OpenSSL 3

Jouke Witteveen j.witteveen at gmail.com
Tue Dec 12 15:33:38 PST 2023


eapol_test uses the ENGINE API of OpenSSL, which has been deprecated
as of OpenSSL 3. Rather than migrating the code to the new API or
pretending that we do not support OpenSSL 3, accept that we use
deprecated functionality.
---

I wanted to use "sae_check_mfp", but there is no wpa_supplicant release
yet that supports it. Maybe it is time for a new release? I tried
building from source and ran into an issue that was reported to this
list on June 15th by Joost Ringoot ("compilation problem deprecated:
Since OpenSSL 3.0"). Porting eapol_test to a new API is work I do not
fancy doing, but I don't think it needs to be done (yet). The deprecated
API is still functional and I see no reason to not support building
against OpenSSL 3 because of it.

wpa_supplicant/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wpa_supplicant/Makefile b/wpa_supplicant/Makefile
index 46e20f44a..4ce04bd34 100644
--- a/wpa_supplicant/Makefile
+++ b/wpa_supplicant/Makefile
@@ -184,7 +184,7 @@ CFLAGS += -DCONFIG_ELOOP_KQUEUE
 endif

 ifdef CONFIG_EAPOL_TEST
-CFLAGS += -Werror -DEAPOL_TEST
+CFLAGS += -Werror -Wno-error=deprecated-declarations -DEAPOL_TEST
 endif

 ifdef CONFIG_CODE_COVERAGE
-- 
2.43.0



More information about the Hostap mailing list