Set OPENSSL_NO_ENGINE, remove engine code

ENGINE was special. It's horrible code even by the low standards of this
library. Some ports may now try to use the stubs which will fail, but
the fallout from this should be minimal. Of course there are various
language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE
by default will likely help fixing this at some point.

ok jsing

2 files changed, 1 insertions, 3 deletions

diff --git a/src/lib/libssl/Symbols.list b/src/lib/libssl/Symbols.list
index 2b9ec25e14..9f261bb97a 100644
--- a/src/lib/libssl/Symbols.list
+++ b/src/lib/libssl/Symbols.list
@@ -95,7 +95,6 @@ SSL_CTX_set_cipher_list
 SSL_CTX_set_ciphersuites
 SSL_CTX_set_client_CA_list
 SSL_CTX_set_client_cert_cb
-SSL_CTX_set_client_cert_engine
 SSL_CTX_set_cookie_generate_cb
 SSL_CTX_set_cookie_verify_cb
 SSL_CTX_set_default_passwd_cb
diff --git a/src/lib/libssl/hidden/openssl/ssl.h b/src/lib/libssl/hidden/openssl/ssl.h
index acc99fe138..e4ec6d6251 100644
--- a/src/lib/libssl/hidden/openssl/ssl.h
+++ b/src/lib/libssl/hidden/openssl/ssl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl.h,v 1.3 2023/07/08 16:40:14 beck Exp $ */
+/* $OpenBSD: ssl.h,v 1.4 2023/07/28 09:53:55 tb Exp $ */
 /*
  * Copyright (c) 2023 Bob Beck <beck@openbsd.org>
  *
@@ -44,7 +44,6 @@ LSSL_USED(SSL_CTX_set_info_callback);
 LSSL_USED(SSL_CTX_get_info_callback);
 LSSL_USED(SSL_CTX_set_client_cert_cb);
 LSSL_USED(SSL_CTX_get_client_cert_cb);
-LSSL_USED(SSL_CTX_set_client_cert_engine);
 LSSL_USED(SSL_CTX_set_cookie_generate_cb);
 LSSL_USED(SSL_CTX_set_cookie_verify_cb);
 LSSL_USED(SSL_CTX_set_next_protos_advertised_cb);