Fedora 41: openssl/engine.h: No such file or directory

[tmontney]

Fresh install of Fedora 41 Server, fully updated. The following packages are installed:

• qt5-qtbase-devel
• qt5-qttools-devel
• openssl-devel

cmake -B build xca completes fine; however, cmake --build build -j5 gets stuck at 47%.

[ 45%] Building CXX object CMakeFiles/xcalib.dir/lib/pk11_attribute.cpp.o
[ 45%] Building CXX object CMakeFiles/xcalib.dir/lib/settings.cpp.o
[ 46%] Building CXX object CMakeFiles/xcalib.dir/lib/db_temp.cpp.o
[ 47%] Building CXX object CMakeFiles/xcalib.dir/lib/pkcs11.cpp.o
[ 47%] Building CXX object CMakeFiles/xcalib.dir/lib/sql.cpp.o
/home/FOO/xca/lib/pkcs11.cpp:20:10: fatal error: openssl/engine.h: No such file or directory
   20 | #include <openssl/engine.h>
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.
gmake[2]: *** [CMakeFiles/xcalib.dir/build.make:489: CMakeFiles/xcalib.dir/lib/pkcs11.cpp.o] Error 1
gmake[2]: *** Waiting for unfinished jobs....
gmake[1]: *** [CMakeFiles/Makefile2:945: CMakeFiles/xcalib.dir/all] Error 2
gmake: *** [Makefile:166: all] Error 2a

Installing openssl1.1-devel-1.1.1q-5.fc39.x86_64 from Fedora 39 solves the issue, but not a good solution.

Additionally, cmake --build build -j5 completed successfully under Fedora 40 Server.

[sterling-teng]

When I cross compile openEuler kernel for loongarch in Fedora 41, also:

scripts/sign-file.c:30:10: fatal error: openssl/engine.h: No such file or directory
   30 | #include <openssl/engine.h>
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.
make[2]: *** [scripts/Makefile.host:114: scripts/sign-file] Error 1
make[1]: *** [/home/yt/workspace/kernel/Makefile:1187: scripts] Error 2
make[1]: *** Waiting for unfinished jobs....
make: *** [Makefile:234: __sub-make] Error 2

real	0m5.296s
user	0m1.389s
sys	0m0.950s
yt@fedora:~/workspace/kernel$ ls /usr/include/openssl/
Display all 139 possibilities? (y or n)
aes.h                   cmp.h                   cryptoerr.h             encodererr.h            kdf.h                   pem2.h                  rsa.h                   trace.h
asn1err.h               cmp_util.h              cryptoerr_legacy.h      encoder.h               lhash.h                 pemerr.h                safestack.h             tserr.h
asn1.h                  cmserr.h                crypto.h                e_os2.h                 macros.h                pem.h                   seed.h                  ts.h
asn1_mac.h              cms.h                   cterr.h                 e_ostime.h              md2.h                   pkcs12err.h             self_test.h             txt_db.h
asn1t.h                 comperr.h               ct.h                    err.h                   md4.h                   pkcs12.h                sha.h                   types.h
asyncerr.h              comp.h                  decodererr.h            esserr.h                md5.h                   pkcs7err.h              srp.h                   uierr.h
async.h                 conf_api.h              decoder.h               ess.h                   mdc2.h                  pkcs7.h                 srtp.h                  ui.h
bioerr.h                conferr.h               des.h                   evperr.h                modes.h                 proverr.h               ssl2.h                  whrlpool.h
bio.h                   conf.h                  dherr.h                 evp.h                   objectserr.h            provider.h              ssl3.h                  x509err.h
blowfish.h              configuration.h         dh.h                    fips.h                  objects.h               prov_ssl.h              sslerr.h                x509.h
bnerr.h                 configuration-x86_64.h  dsaerr.h                fipskey.h               obj_mac.h               quic.h                  sslerr_legacy.h         x509v3err.h
bn.h                    conftypes.h             dsa.h                   fips_names.h            ocsperr.h               randerr.h               ssl.h                   x509v3.h
buffererr.h             core_dispatch.h         dtls1.h                 hmac.h                  ocsp.h                  rand.h                  stack.h                 x509_vfy.h
buffer.h                core.h                  ebcdic.h                hpke.h                  opensslconf.h           rc2.h                   storeerr.h              
camellia.h              core_names.h            ecdh.h                  httperr.h               opensslv.h              rc4.h                   store.h                 
cast.h                  core_object.h           ecdsa.h                 http.h                  ossl_typ.h              rc5.h                   symhacks.h              
cmac.h                  crmferr.h               ecerr.h                 idea.h                  param_build.h           ripemd.h                thread.h                
cmperr.h                crmf.h                  ec.h                    kdferr.h                params.h                rsaerr.h                tls1.h                  
yt@fedora:~/workspace/kernel$ ls /usr/include/openssl/encoder
encodererr.h  encoder.h     

I have dnf install openssl-devel. It seems that no engine.h at /usr/include/openssl/. ;)

it's been deprecated, not removed, this is because Engine
support upstream has been deprecated[1]. We just need to install the openssl-devel-engine package as the
engine support has been split out in preparation for it being removed in the future.

sudo dnf install openssl-devel-engine

hope it can help other guys!

[1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md