]> git.ipfire.org Git - thirdparty/openssl.git/commit
Avoid calling ssl_load_sigalgs in tls1_set_sigalgs_list
authorViktor Dukhovni <openssl-users@dukhovni.org>
Sat, 8 Feb 2025 06:05:20 +0000 (17:05 +1100)
committerViktor Dukhovni <openssl-users@dukhovni.org>
Tue, 11 Feb 2025 16:13:07 +0000 (03:13 +1100)
commit3252fe646b17c1a3cebed4ff8fe35c19c523e222
tree4f2d0947dd5ef88280dee06047cd7df3d79fde1e
parentcf9d6685fda656c07fab8527750284f4446a7372
Avoid calling ssl_load_sigalgs in tls1_set_sigalgs_list

- The signature algorithms are already loaded in SSL_CTX_new()

- Calling ssl_load_sigalgs() again is non-productive, and does
  not look thread safe.

- And of course avoiding the call is cheaper.

- Also fix broken loop test in ssl_cert_lookup_by_pkey()

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26671)
ssl/ssl_cert.c
ssl/t1_lib.c