Using latest openssl

[ranjali]

Hi,

It seems that we are using APIs which will be deprecated by OpenSSL 3.x and it may be removed in the future.

Is there possibility to use non-deprecated API.

[zandbelt]

that is something we have started to look into indeed but it is quite a bit of work and it will take time to change all of the affected code across the board; if there's anyone interested to help out on this, please chime in

[czlitony]

@zandbelt we want to update cjose to support openssl3, do we have a release plan for v1.0.x to support openssl3?

[zandbelt]

just a note that 0.6.2.x already supports OpenSSL 3.x in addition to older versions; the 1.0.x is merely a cleanup/rewrite that drops support for the older versions and no longer uses deprecated APIs

[kirill-shevtsov]

Branch version-1.0.x cannot be built with -DOPENSSL_NO_DEPRECATED -DOPENSSL_API_COMPAT=30000 because it still uses deprecated OpenSSL 1.1 API:

src/jwe.c: In function '_cjose_jwe_encrypt_dat_aes_gcm':
src/jwe.c:1179:5: error: implicit declaration of function 'EVP_CIPHER_CTX_init'; did you mean 'EVP_CIPHER_CTX_nid'? [-Werror=implicit-function-declaration]
     EVP_CIPHER_CTX_init(ctx);
     ^~~~~~~~~~~~~~~~~~~
     EVP_CIPHER_CTX_nid