Problem: The OpenSSL ENGINE API is deprecated in RHEL-10 and later Fix By: Update the OpenSSL libraries installed and then rebuild the binary Waive If: The application is not intended for RHEL-10 Example: FAIL: OpenSSL binary using the deprecated ENGINE API detected
This test checks that the if the application uses the OpenSSL library, it does not make use of the decpreated ENGINE API.
OpenSSL Engines are not FIPS compatible and corresponding API is deprecated since OpenSSL 3.0. The engine functionality we are aware of (PKCS#11, TPM) is covered by providers maintained by Crypto Team now. Feel free to reach crypto team (#crypto) in case of questions.
This test is normally only enabled if the profile is unknown or RHEL-10. If necessary the test can be disabled via the --skip-openssl-engine option and enabled via the --test-openssl-engine option.