Dropping OpenSSL engines support, DSA, DES

[xnox]

• [ ] Rebuild packages with

  CFLAGS='-DOPENSSL_NO_ENGINE -DOPENSSL_NO_DSA -DOPENSSL_NO_DES'

• [ ] Verify no reverse deps use them.

• [ ] Then rebuild openssl with those things turned off.

[xnox]

Binaries using DES

./unpacked-cmake-3.29.0-r0.apk/usr/bin/ccmake
./unpacked-cmake-3.29.0-r0.apk/usr/bin/cmake
./unpacked-cmake-3.29.0-r0.apk/usr/bin/cpack
./unpacked-cmake-3.29.0-r0.apk/usr/bin/ctest
./unpacked-wget-1.24.5-r0.apk/usr/bin/wget
./unpacked-stunnel-5.72-r0.apk/usr/bin/stunnel
./unpacked-mariadb-backup-10.6.12-r1.apk/usr/bin/mariadb-backup
./unpacked-mariadb-11.2-embedded-11.2.3-r2.apk/usr/bin/mariadb-embedded
./unpacked-openssl-provider-legacy-3.3.0-r5.apk/usr/lib/ossl-modules/legacy.so
./unpacked-mariadb-10.11-10.11.7-r1.apk/usr/bin/test-connect-t
./unpacked-mariadb-10.11-10.11.7-r1.apk/usr/bin/mariadbd
./unpacked-mariadb-10.11-10.11.7-r1.apk/usr/lib/libmariadbd.so.19
./unpacked-mariadb-11.2-backup-11.2.3-r2.apk/usr/bin/mariadb-backup
./unpacked-mariadb-10.6-10.6.17-r1.apk/usr/bin/test-connect-t
./unpacked-mariadb-10.6-10.6.17-r1.apk/usr/bin/mariadbd
./unpacked-mariadb-10.6-10.6.17-r1.apk/usr/lib/libmariadbd.so.19
./unpacked-mariadb-test-10.11.7-r1.apk/usr/bin/mariadb-client-test-embedded
./unpacked-mariadb-test-10.11.7-r1.apk/usr/bin/mariadb-test-embedded
./unpacked-net-snmp-5.9.4-r0.apk/usr/lib/libsnmp.so.40.2.1
./unpacked-mariadb-10.11-embedded-10.11.7-r1.apk/usr/bin/mariadb-embedded
./unpacked-mariadb-11.2-11.2.3-r2.apk/usr/bin/test-connect-t
./unpacked-mariadb-11.2-11.2.3-r2.apk/usr/bin/mariadbd
./unpacked-mariadb-11.2-11.2.3-r2.apk/usr/bin/mariadb-client-test-embedded
./unpacked-mariadb-11.2-11.2.3-r2.apk/usr/bin/mariadb-test-embedded
./unpacked-mariadb-11.2-11.2.3-r2.apk/usr/lib/libmariadbd.so.19
./unpacked-libgit2-1.8.0-r0.apk/usr/bin/git2
./unpacked-libgit2-1.8.0-r0.apk/usr/lib/libgit2.so.1.8.0
./unpacked-libcurl4-7.87.0-r0.apk/usr/lib/libcurl.so.4.8.0
./unpacked-mariadb-10.6-embedded-10.6.17-r1.apk/usr/bin/mariadb-embedded
./unpacked-mariadb-10.6.12-r1.apk/usr/bin/test-connect-t
./unpacked-mariadb-10.6.12-r1.apk/usr/bin/mariadbd
./unpacked-mariadb-10.6.12-r1.apk/usr/lib/libmariadbd.so.19
./unpacked-mariadb-10.6-test-10.6.17-r1.apk/usr/bin/mariadb-client-test-embedded
./unpacked-mariadb-10.6-test-10.6.17-r1.apk/usr/bin/mariadb-test-embedded
./unpacked-mariadb-10.6-backup-10.6.17-r1.apk/usr/bin/mariadb-backup
./unpacked-net-snmp-libs-5.9.4-r0.apk/usr/lib/libnetsnmp.so.40.2.1
./unpacked-cyrus-sasl-2.1.28-r1.apk/usr/lib/sasl2/libntlm.so.3.0.0
./unpacked-cyrus-sasl-2.1.28-r1.apk/usr/lib/sasl2/libdigestmd5.so.3.0.0
./unpacked-mariadb-embedded-10.6.12-r1.apk/usr/bin/mariadb-embedded
./unpacked-mariadb-10.11-backup-10.11.7-r1.apk/usr/bin/mariadb-backup
./unpacked-libcurl-openssl4-8.7.1-r0.apk/usr/lib/libcurl.so.4.8.0

[xnox]

binaries using engine

./unpacked-softhsm-2.6.1-r1.apk/usr/bin/softhsm2-util
./unpacked-softhsm-2.6.1-r1.apk/usr/lib/softhsm/libsofthsm2.so
./unpacked-nginx-1.25.2-r0.apk/usr/sbin/nginx
./unpacked-openssh-server-9.7_p1-r0.apk/usr/sbin/sshd
./unpacked-libpq-16-16.2-r4.apk/usr/lib/libpq.so.5.16
./unpacked-ingress-nginx-controller-1.10.0-r6.apk/usr/bin/nginx
./unpacked-cmake-3.29.0-r0.apk/usr/bin/ccmake
./unpacked-cmake-3.29.0-r0.apk/usr/bin/cmake
./unpacked-cmake-3.29.0-r0.apk/usr/bin/cpack
./unpacked-cmake-3.29.0-r0.apk/usr/bin/ctest
./unpacked-openssl-engine-padlock-3.3.0-r5.apk/usr/lib/engines-3/padlock.so
./unpacked-librdkafka-2.3.0-r1.apk/usr/lib/librdkafka.so.1
./unpacked-couchdb-3.3.3-r1.apk/usr/share/couchdb/lib/crypto-5.1.4.1/priv/lib/otp_test_engine.so
./unpacked-libpq-12-12.18-r4.apk/usr/lib/libpq.so.5.12
./unpacked-mosquitto-libs-2.0.18-r0.apk/usr/lib/libmosquitto.so.1
./unpacked-nodejs-16-16.20.2-r5.apk/usr/bin/node
./unpacked-openssh-keyscan-9.7_p1-r0.apk/usr/bin/ssh-keyscan
./unpacked-py3-cryptography-42.0.5-r0.apk/usr/lib/python3.12/site-packages/cryptography/hazmat/bindings/_rust.cpython-312-x86_64-linux-gnu.so
./unpacked-apr-util-1.6.3-r0.apk/usr/lib/apr-util-1/apr_crypto_openssl-1.so
./unpacked-stunnel-5.72-r0.apk/usr/bin/stunnel
./unpacked-rabbitmq-c-0.14.0-r0.apk/usr/lib/librabbitmq.so.0.14.0
./unpacked-grpc-1.62.1-r0.apk/usr/lib/libgrpc.so.39.0.0
./unpacked-rust-1.76-1.76.0-r0.apk/usr/bin/cargo
./unpacked-rustup-1.27.0-r0.apk/usr/bin/rustup-init
./unpacked-libpq-11.17-r0.apk/usr/lib/libpq.so.5.11
./unpacked-libpq-14-14.11-r5.apk/usr/lib/libpq.so.5.14
./unpacked-nodejs-20-20.12.2-r0.apk/usr/bin/node
./unpacked-s2n-tls-1.4.10-r0.apk/usr/lib/libs2n.so.1.0.0
./unpacked-libssl3-3.3.0-r5.apk/usr/lib/libssl.so.3
./unpacked-ldns-1.8.3-r0.apk/usr/lib/libldns.so.3.5.0
./unpacked-nodejs-18.14.0-r0.apk/usr/bin/node
./unpacked-libpq-15-15.6-r4.apk/usr/lib/libpq.so.5.15
./unpacked-nmap-7.94-r1.apk/usr/bin/nmap
./unpacked-openssl-provider-legacy-3.3.0-r5.apk/usr/lib/ossl-modules/legacy.so
./unpacked-rust-1.77-1.77.0-r0.apk/usr/bin/cargo
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so.1.0.1
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so.1
./unpacked-mosquitto-2.0.18-r0.apk/usr/sbin/mosquitto
./unpacked-nodejs-21-21.7.3-r0.apk/usr/bin/node
./unpacked-libssh2-1.11.0-r3.apk/usr/lib/libssh2.so.1.0.1
./unpacked-erlang-26-crypto-26.1-r0.apk/usr/lib/crypto-5.3/priv/lib/otp_test_engine.so
./unpacked-nginx-stable-1.24.0-r4.apk/usr/sbin/nginx
./unpacked-dotnet-8-runtime-8.0.4-r0.apk/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.4/libSystem.Security.Cryptography.Native.OpenSsl.so
./unpacked-openssh-pkcs11-helper-9.7_p1-r0.apk/usr/lib/ssh/ssh-pkcs11-helper
./unpacked-rust-1.75-1.75.0-r0.apk/usr/bin/cargo
./unpacked-py3-grpcio-1.62.1-r0.apk/usr/lib/python3.12/site-packages/grpc/_cython/cygrpc.cpython-312-x86_64-linux-gnu.so
./unpacked-erlang-25-25.3.2.10-r0.apk/usr/lib/erlang/lib/crypto-5.1.4.2/priv/lib/otp_test_engine.so
./unpacked-tomcat-native-2.0.7-r1.apk/usr/lib/tomcat-native/libtcnative-2.so.0.0.7
./unpacked-openssl-3.3.0-r5.apk/usr/bin/openssl
./unpacked-ingress-nginx-1.21.6-r0.apk/usr/local/nginx/sbin/nginx
./unpacked-libssh-0.10.6-r0.apk/usr/lib/libssh.so.4.9.6
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so.4
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so.4.9.4
./unpacked-libcurl4-7.87.0-r0.apk/usr/lib/libcurl.so.4.8.0
./unpacked-fluent-bit-2.2.2-r0.apk/usr/bin/fluent-bit
./unpacked-fluent-bit-2.2.2-r0.apk/usr/lib/fluent-bit/libfluent-bit.so
./unpacked-libpq-13-13.14-r4.apk/usr/lib/libpq.so.5.13
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh-add
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh-agent
./unpacked-nodejs-18-18.20.2-r0.apk/usr/bin/node
./unpacked-rust-1.77.2-r0.apk/usr/bin/cargo
./unpacked-neon-5037-r0.apk/usr/libexec/neon/v14/lib/libpq.so.5.14
./unpacked-neon-5037-r0.apk/usr/libexec/neon/v16/lib/libpq.so.5.16
./unpacked-neon-5037-r0.apk/usr/libexec/neon/v15/lib/libpq.so.5.15
./unpacked-openssl-engine-afalg-3.3.0-r5.apk/usr/lib/engines-3/afalg.so
./unpacked-nginx-mainline-1.25.4-r1.apk/usr/sbin/nginx
./unpacked-erlang-26-26.2.3-r0.apk/usr/lib/erlang/lib/crypto-5.4.1/priv/lib/otp_test_engine.so
./unpacked-erlang-26-26.2.3-r0.apk/usr/lib/erlang/lib/crypto-5.4.1/priv/lib/crypto.so
./unpacked-zellij-0.39.2-r0.apk/usr/bin/zellij
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-ctest
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-cinstall
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-cbuild
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-capi
./unpacked-erlang-26.0.1-r0.apk/usr/lib/erlang/lib/crypto-5.2/priv/lib/otp_test_engine.so
./unpacked-nodejs-19-19.9.0-r7.apk/usr/bin/node
./unpacked-apk-tools-2.14.1-r0.apk/sbin/apk
./unpacked-libpq-11-11.22-r7.apk/usr/lib/libpq.so.5.11
./unpacked-libcurl-openssl4-8.7.1-r0.apk/usr/lib/libcurl.so.4.8.0
./unpacked-openssh-keygen-9.7_p1-r0.apk/usr/bin/ssh-keygen

[xnox]

binaries using dsa

./unpacked-ruby-3.1-3.1.4-r6.apk/usr/lib/ruby/3.1.0/x86_64-linux-gnu/openssl.so
./unpacked-softhsm-2.6.1-r1.apk/usr/bin/softhsm2-keyconv
./unpacked-softhsm-2.6.1-r1.apk/usr/bin/softhsm2-util
./unpacked-softhsm-2.6.1-r1.apk/usr/lib/softhsm/libsofthsm2.so
./unpacked-libretls-3.8.1-r0.apk/usr/lib/libtls.so.28.0.0
./unpacked-openssh-server-9.7_p1-r0.apk/usr/sbin/sshd
./unpacked-bind-libs-9.18.25-r0.apk/usr/lib/libdns-9.18.25.so
./unpacked-qt5-qtbase-5.15.13-r0.apk/usr/lib/libQt5Network.so.5.15.13
./unpacked-nodejs-16-16.20.2-r5.apk/usr/bin/node
./unpacked-openssh-keyscan-9.7_p1-r0.apk/usr/bin/ssh-keyscan
./unpacked-py3-cryptography-42.0.5-r0.apk/usr/lib/python3.12/site-packages/cryptography/hazmat/bindings/_rust.cpython-312-x86_64-linux-gnu.so
./unpacked-openvpn-2.6.10-r0.apk/usr/sbin/openvpn
./unpacked-rust-1.76-1.76.0-r0.apk/usr/bin/cargo
./unpacked-nodejs-20-20.12.2-r0.apk/usr/bin/node
./unpacked-s2n-tls-1.4.10-r0.apk/usr/lib/libs2n.so.1.0.0
./unpacked-ldns-1.8.3-r0.apk/usr/lib/libldns.so.3.5.0
./unpacked-nodejs-18.14.0-r0.apk/usr/bin/node
./unpacked-haproxy-2.9.7-r0.apk/usr/sbin/haproxy
./unpacked-rpm-4.19.1-r0.apk/usr/lib/librpmio.so.10.0.1
./unpacked-nmap-7.94-r1.apk/usr/bin/nmap
./unpacked-njs-debug-0.8.3-r0.apk/usr/bin/njs-debug
./unpacked-openssh-sk-helper-9.7_p1-r0.apk/usr/lib/ssh/ssh-sk-helper
./unpacked-ruby-3.2-3.2.3-r3.apk/usr/lib/ruby/3.2.0/x86_64-linux-gnu/openssl.so
./unpacked-rust-1.77-1.77.0-r0.apk/usr/bin/cargo
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so.1.0.1
./unpacked-py3-ssh2-python-1.0.0-r0.apk/usr/share/py3-ssh2/.venv/lib/python3.11/site-packages/ssh2/libssh2.so.1
./unpacked-xmlsec-openssl-1.3.2-r2.apk/usr/lib/libxmlsec1-openssl.so.1.3.2
./unpacked-nodejs-21-21.7.3-r0.apk/usr/bin/node
./unpacked-libssh2-1.11.0-r3.apk/usr/lib/libssh2.so.1.0.1
./unpacked-dotnet-8-runtime-8.0.4-r0.apk/usr/share/dotnet/shared/Microsoft.NETCore.App/8.0.4/libSystem.Security.Cryptography.Native.OpenSsl.so
./unpacked-openssh-pkcs11-helper-9.7_p1-r0.apk/usr/lib/ssh/ssh-pkcs11-helper
./unpacked-rust-1.75-1.75.0-r0.apk/usr/bin/cargo
./unpacked-pkcs11-helper-1.30.0-r0.apk/usr/lib/libpkcs11-helper.so.1.0.0
./unpacked-dotnet-6-runtime-6.0.129-r0.apk/usr/share/dotnet/shared/Microsoft.NETCore.App/6.0.29/libSystem.Security.Cryptography.Native.OpenSsl.so
./unpacked-libssh-0.10.6-r0.apk/usr/lib/libssh.so.4.9.6
./unpacked-dotnet-7-runtime-7.0.117-r0.apk/usr/share/dotnet/shared/Microsoft.NETCore.App/7.0.17/libSystem.Security.Cryptography.Native.OpenSsl.so
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so.4
./unpacked-py3-ssh-python-1.0.0-r0.apk/usr/share/py3-ssh/.venv/lib/python3.11/site-packages/ssh/libssh.so.4.9.4
./unpacked-ruby-3.3-3.3.0-r3.apk/usr/lib/ruby/3.3.0/x86_64-linux-gnu/openssl.so
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh-add
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh
./unpacked-openssh-client-9.7_p1-r0.apk/usr/bin/ssh-agent
./unpacked-nodejs-18-18.20.2-r0.apk/usr/bin/node
./unpacked-rust-1.77.2-r0.apk/usr/bin/cargo
./unpacked-aws-c-cal-0.6.11-r0.apk/usr/lib/libaws-c-cal.so.1.0.0
./unpacked-xmlsec-1.3.2-r2.apk/usr/bin/xmlsec1
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-ctest
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-cinstall
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-cbuild
./unpacked-cargo-c-0.9.31-r0.apk/usr/bin/cargo-capi
./unpacked-nodejs-19-19.9.0-r7.apk/usr/bin/node
./unpacked-openssh-keygen-9.7_p1-r0.apk/usr/bin/ssh-keygen
./unpacked-ruby-3.0-3.0.6-r5.apk/usr/lib/ruby/3.0.0/x86_64-linux-gnu/openssl.so
./unpacked-njs-0.8.3-r0.apk/usr/bin/njs