]> git.ipfire.org Git - thirdparty/openssl.git/commit
Deprecate the EVP_PKEY controls for CMS and PKCS#7
authorTomas Mraz <tomas@openssl.org>
Thu, 1 Apr 2021 15:14:43 +0000 (17:14 +0200)
committerTomas Mraz <tomas@openssl.org>
Tue, 6 Apr 2021 07:10:11 +0000 (09:10 +0200)
commit0cfbc828e03ad69c50ae51e0c88920d90906498a
tree1d931bc42093e7d9b119815785f7ada3330b8b6e
parent5ad3e6c56eb1c295a7de92de5bb2f54614d5c277
Deprecate the EVP_PKEY controls for CMS and PKCS#7

Improve the ossl_rsa_check_key() to prevent non-signature
operations with PSS keys.

Do not invoke the EVP_PKEY controls for CMS and PKCS#7 anymore
as they are not needed anymore and deprecate them.

Fixes #14276

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/14760)
CHANGES.md
crypto/cms/cms_env.c
crypto/cms/cms_sd.c
crypto/evp/ctrl_params_translate.c
crypto/pkcs7/pk7_doit.c
include/openssl/evp.h
providers/common/include/prov/securitycheck.h
providers/common/securitycheck.c
providers/implementations/asymciphers/rsa_enc.c
providers/implementations/kem/rsa_kem.c
providers/implementations/signature/rsa.c