]> git.ipfire.org Git - thirdparty/openssl.git/commit
no-engine: fix signing with legacy app method based keys
authorMatthias St. Pierre <matthias.st.pierre@ncp-e.com>
Thu, 21 Sep 2023 14:43:43 +0000 (16:43 +0200)
committerTodd Short <todd.short@me.com>
Fri, 22 Sep 2023 19:07:49 +0000 (15:07 -0400)
commit1acc3e8cc3c69187b55cc557c1bc03278ab38063
tree7a84209b18185a682b8f7dc7dcb5018e002b37af
parent34d36cdcbdde2e402446994e8384404ca98bfb3f
no-engine: fix signing with legacy app method based keys

Signing with an app method based key (i.e. an `EVP_PKEY` which wraps an
`RSA` key with an application defined `RSA_METHOD`) used to work in 1.1.1.
That feature was broken in commit 60488d2434, but later on fixed by @t8m
in commit b247113c05 (see #14859).

This commit corrects a  minor flaw of the fix, which affects only
`no-engine` builds: the special treatment for foreign keys is guarded
by an `OPENSSL_NO_ENGINE` check.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/22163)
crypto/evp/pmeth_lib.c