]> git.ipfire.org Git - thirdparty/openssl.git/commit
Don't restrict what EVP_PKEY_Q_keygen can be used for
authorMatt Caswell <matt@openssl.org>
Mon, 16 Sep 2024 11:00:32 +0000 (12:00 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 17 Sep 2024 15:25:44 +0000 (16:25 +0100)
commita57c6f84920bff522bca5fede73f1a3f132d7cff
tree166a5a0f41ec404228ee64ee0cb27cad0629db67
parent6288aa440c1ba111eaf52cf79659a25329205022
Don't restrict what EVP_PKEY_Q_keygen can be used for

The EVP_PKEY_Q_keygen function contains a list of algorithm type names
and fails if the requested name is not in the list. This prevents the use
of this function for externally supplied key type names.

We should just assume that any unrecognised key type name does not require
a parameter.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/25468)
crypto/evp/evp_lib.c
doc/man3/EVP_PKEY_keygen.pod