]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Fix EAP-TLS connection failure in Android
authorsunilravi <sunilravi@google.com>
Fri, 21 Mar 2025 02:14:23 +0000 (02:14 +0000)
committerJouni Malinen <j@w1.fi>
Sun, 23 Mar 2025 08:39:39 +0000 (10:39 +0200)
commit24d4ecd3531cd23c5ac6bbd67999aee64899b0e7
tree03d4289a6ecccd4e0b839d9598347a6b57d34fe0
parentc33ba59d85a1967906e570d95340c9e98c5508b1
OpenSSL: Fix EAP-TLS connection failure in Android

In Android, the client private key is stored in the keystore engine and
the code depends on OPENSSL_NO_ENGINE defined in BoringSSL to load the
private key.

Commit 400b89162294 ("OpenSSL: Use pkcs11-provider when
OPENSSL_NO_ENGINE is defined" broke the logic to load the client private
key in Android which resulted in EAP-TLS connection failure. With this
change pkcs11-provider is used when OPENSSL_NO_ENGINE is defined.

Fix the issue by adding conditional compilation check for Android
platform to avoid using Provider API.

Fixes: 400b89162294 ("OpenSSL: Use pkcs11-provider when OPENSSL_NO_ENGINE is defined")
Signed-off-by: sunilravi <sunilravi@google.com>
src/crypto/tls_openssl.c