Make rust-openssl work with no deprecated symbols

.github/workflows/ci.yml

@@ -411,7 +411,6 @@ jobs:
             cargo run --manifest-path=systest/Cargo.toml --target ${{ matrix.target }} $features
           if: ${{ !(matrix.library.name == 'boringssl' || matrix.library.name == 'aws-lc') }}
         - name: Test openssl
-          if: ${{ ! endsWith(matrix.library.name, 'no-deprecated') }}
           run: |
             if [[ "${{ matrix.library.name }}" == "boringssl" && "${{ matrix.bindgen }}" != "true" ]]; then
               features="--features unstable_boringssl"
@@ -437,4 +436,4 @@ jobs:
               features="$features --features openssl-sys/bindgen"
             fi
             cargo test --manifest-path=openssl-errors/Cargo.toml --target ${{ matrix.target }} $features
-          if: ${{ !(matrix.library.name == 'boringssl' || matrix.library.name == 'aws-lc' || endsWith(matrix.library.name, 'no-deprecated')) }}
+          if: ${{ !(matrix.library.name == 'boringssl' || matrix.library.name == 'aws-lc') }}

openssl/src/aes.rs

@@ -23,11 +23,7 @@
 //! # Examples
 
 #![cfg_attr(
-    all(
-        not(boringssl),
-        not(awslc),
-        not(osslconf = "OPENSSL_NO_DEPRECATED_3_0")
-    ),
+    all(not(boringssl), not(awslc),),
     doc = r#"\
 ## AES IGE
 ```rust
@@ -160,7 +156,6 @@ impl AesKey {
 /// Panics if `in_` is not the same length as `out`, if that length is not a multiple of 16, or if
 /// `iv` is not at least 32 bytes.
 #[cfg(not(any(boringssl, awslc)))]
-#[cfg(not(osslconf = "OPENSSL_NO_DEPRECATED_3_0"))]
 #[corresponds(AES_ige_encrypt)]
 pub fn aes_ige(in_: &[u8], out: &mut [u8], key: &AesKey, iv: &mut [u8], mode: Mode) {
     unsafe {
@@ -273,7 +268,6 @@ mod test {
     // From https://www.mgp25.com/AESIGE/
     #[test]
     #[cfg(not(any(boringssl, awslc)))]
-    #[cfg(not(osslconf = "OPENSSL_NO_DEPRECATED_3_0"))]
     fn ige_vector_1() {
         let raw_key = "000102030405060708090A0B0C0D0E0F";
         let raw_iv = "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F";

openssl/src/bn.rs

@@ -31,9 +31,11 @@ use std::ops::{Add, Deref, Div, Mul, Neg, Rem, Shl, Shr, Sub};
 use std::{fmt, ptr};
 
 use crate::asn1::Asn1Integer;
+#[cfg(not(osslconf = "OPENSSL_NO_DEPRECATED_3_0"))]
+use crate::cvt_n;
 use crate::error::ErrorStack;
 use crate::string::OpensslString;
-use crate::{cvt, cvt_n, cvt_p, LenType};
+use crate::{cvt, cvt_p, LenType};
 use openssl_macros::corresponds;
 
 cfg_if! {
@@ -133,6 +135,7 @@ impl BigNumContext {
 foreign_type_and_impl_send_sync! {
     type CType = ffi::BIGNUM;
     fn drop = ffi::BN_free;
+    fn clone = ffi::BN_dup;
 
     /// Dynamically sized large number implementation
     ///

openssl/src/cipher_ctx.rs

@@ -735,7 +735,7 @@ mod test {
     #[cfg(not(any(boringssl, awslc)))]
     fn seal_open() {
         let private_pem = include_bytes!("../test/rsa.pem");
-        let public_pem = include_bytes!("../test/rsa.pem.pub");
+        let public_pem = include_bytes!("../test/rsa.pub.pem");
         let private_key = PKey::private_key_from_pem(private_pem).unwrap();
         let public_key = PKey::public_key_from_pem(public_pem).unwrap();
         let cipher = Cipher::aes_256_cbc();