]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
authorJan Stancek <jstancek@redhat.com>
Fri, 20 Sep 2024 16:52:48 +0000 (19:52 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 25 Apr 2025 08:45:58 +0000 (10:45 +0200)
commit2eb70f54ad8634b63402bd9bcea8e4ee5af85add
treecbd8ef41a9479be76b7c6e94cff6cf0192a171d0
parentf8dafdafddcf5ebf58658e89f8c003217e961e8c
sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3

commit 558bdc45dfb2669e1741384a0c80be9c82fa052c upstream.

ENGINE API has been deprecated since OpenSSL version 3.0 [1].
Distros have started dropping support from headers and in future
it will likely disappear also from library.

It has been superseded by the PROVIDER API, so use it instead
for OPENSSL MAJOR >= 3.

[1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md

[jarkko: fixed up alignment issues reported by checkpatch.pl --strict]

Signed-off-by: Jan Stancek <jstancek@redhat.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: R Nageswara Sastry <rnsastry@linux.ibm.com>
Reviewed-by: Neal Gompa <neal@gompa.dev>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Huacai Chen <chenhuacai@loongson.cn>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
certs/extract-cert.c
scripts/sign-file.c