diff --git a/packages/cfengine/build.sh b/packages/cfengine/build.sh
index ff520f776..eb650f358 100644
--- a/packages/cfengine/build.sh
+++ b/packages/cfengine/build.sh
@@ -3,7 +3,7 @@ TERMUX_PKG_DESCRIPTION="CFEngine is a configuration management technology."
 TERMUX_PKG_LICENSE="GPL-3.0"
 TERMUX_PKG_MAINTAINER="@craigcomstock"
 TERMUX_PKG_VERSION=1:3.18.0
-TERMUX_PKG_REVISION=3
+TERMUX_PKG_REVISION=4
 TERMUX_PKG_SRCURL=(https://github.com/cfengine/core/archive/${TERMUX_PKG_VERSION:2}.zip
                    https://github.com/cfengine/masterfiles/archive/12b52c25e03439341aa7a6a5c7917efa06826f8d.zip
                    https://github.com/cfengine/libntech/archive/118d6e4bf5ae2611236fe3883b422d50f10da45c.zip)
diff --git a/packages/cfengine/core-configure.ac.patch b/packages/cfengine/core-configure.ac.patch
new file mode 100644
index 000000000..385302f5d
--- /dev/null
+++ b/packages/cfengine/core-configure.ac.patch
@@ -0,0 +1,13 @@
+--- ./configure.ac.orig	2022-02-16 15:51:34.491053439 +0530
++++ ./configure.ac	2022-02-16 15:52:01.251053429 +0530
+@@ -471,10 +471,6 @@
+    #endif
+    ]])],[AC_MSG_RESULT(OK)],[AC_MSG_ERROR(This release of CFEngine requires OpenSSL >= 0.9.7)])
+ 
+-   if test "x$ac_cv_lib_crypto_RSA_generate_key_ex" = "xyes" ; then
+-      AC_DEFINE(OPENSSL_NO_DEPRECATED, 1, [Define if non deprecated API is available.])
+-   fi
+-
+    if test "x$ac_cv_lib_crypto_RSA_generate_key_ex" = "xno" && \
+       test "x$ac_cv_lib_crypto_RSA_generate_key" = "xno" ; then
+       AC_MSG_ERROR(Cannot find OpenSSL)
diff --git a/packages/cfengine/libntech-configure.ac.patch b/packages/cfengine/libntech-configure.ac.patch
new file mode 100644
index 000000000..74ba1ec7a
--- /dev/null
+++ b/packages/cfengine/libntech-configure.ac.patch
@@ -0,0 +1,13 @@
+--- ./libntech/configure.ac.orig	2022-02-16 15:23:38.630146433 +0530
++++ ./libntech/configure.ac	2022-02-16 15:24:51.014566664 +0530
+@@ -385,10 +385,6 @@
+     #endif
+     ]])],[AC_MSG_RESULT(OK)],[AC_MSG_ERROR(This release of CFEngine requires OpenSSL >= 0.9.7)])
+ 
+-    if test "x$ac_cv_lib_crypto_RSA_generate_key_ex" = "xyes" ; then
+-       AC_DEFINE(OPENSSL_NO_DEPRECATED, 1, [Define if non deprecated API is available.])
+-    fi
+-
+     if test "x$ac_cv_lib_crypto_RSA_generate_key_ex" = "xno" && \
+        test "x$ac_cv_lib_crypto_RSA_generate_key" = "xno" ; then
+        AC_MSG_ERROR(Cannot find OpenSSL)