Debian will be transitioning to openssl-3.0 for the next release soonish.
gcc -g -Wall -Werror -fno-strict-aliasing -I/usr/include -I/usr/include/openssl -Wall -pedantic -Wno-long-long -pthread -DRADPROT_UDP -DRADPROT_TCP -DRADPROT_TLS -DRADPROT_DTLS -g -O2 -fdebug-prefix-map=/build/radsecproxy-1.8.2=. -fstack-protector-strong -Wformat -Werror=format-security -Wl,-z,relro -Wl,-z,now -o radsecproxy-conf catgconf.o debug.o gconfig.o util.o -lnettle
tlscommon.c: In function 'cookie_calculate_hash':
tlscommon.c:167:5: error: 'HMAC' is deprecated [-Werror=deprecated-declarations]
167 | HMAC(EVP_sha256(), (const void*) cookie_secret, COOKIE_SECRET_LENGTH,
| ^~~~
In file included from /usr/include/openssl/opensslv.h:109,
from /usr/include/openssl/macros.h:11,
from /usr/include/x86_64-linux-gnu/openssl/opensslconf.h:14,
from /usr/include/openssl/macros.h:10,
from /usr/include/openssl/ssl.h:16,
from tlscommon.c:25:
/usr/include/openssl/hmac.h:45:1: note: declared here
45 | DEPRECATEDIN_3_0(unsigned char *HMAC(const EVP_MD *evp_md, const void *key,
| ^~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
As a workaround I could remove the error on deprecations but a real fix would be nice.