From 61ad7a59e0b4f024e71623676ede41ce59660c0c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ondr=CC=8Cej=20Sury=CC=81?= <ondrej@isc.org>
Date: Wed, 18 Jan 2023 11:10:30 +0100
Subject: [PATCH] Enable OpenSSL 3.x build with -DOPENSSL_NO_DEPRECATED=1

Add a CI job where we explicitly disable any use of OpenSSL functions
that have been deprecated in OpenSSL 3.x.
---
 .gitlab-ci.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index ba74e23ac7..545439d05a 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -765,6 +765,30 @@ scan-build:
     expire_in: "1 day"
     when: on_failure
 
+# Jobs for strict OpenSSL 3.x (no deprecated) GCC builds on Debian "sid" (amd64)
+
+gcc:ossl3:sid:amd64:
+  variables:
+    CC: gcc
+    CFLAGS: "${CFLAGS_COMMON} -O3 -DOPENSSL_NO_DEPRECATED=1 -DOPENSSL_API_COMPAT=30000"
+    RUN_MAKE_INSTALL: 1
+  <<: *debian_sid_amd64_image
+  <<: *build_job
+
+system:gcc:ossl3:sid:amd64:
+  <<: *debian_sid_amd64_image
+  <<: *system_test_job
+  needs:
+    - job: gcc:ossl3:sid:amd64
+      artifacts: true
+
+unit:gcc:ossl3:amd64:
+  <<: *debian_sid_amd64_image
+  <<: *unit_test_job
+  needs:
+    - job: gcc:ossl3:sid:amd64
+      artifacts: true
+
 # Jobs for regular GCC builds on Debian "sid" (amd64)
 # Also tests configration option: --without-lmdb.