]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0b7afd6) | patch
Use the actual NID for provided signature algorithms
authorMatt Caswell <matt@openssl.org>
Tue, 28 Oct 2025 14:53:11 +0000 (14:53 +0000)
committerTomas Mraz <tomas@openssl.org>
Tue, 4 Nov 2025 17:28:27 +0000 (18:28 +0100)
commitcbfc8cc3dc4f2b437f4dd65a266c9f8ff4cd5781
tree759ee6091507c71922e5f3cfcf179d1f9afe5c6etree | snapshot
parent0b7afd6d303d150c13c04f66e77fcbcdaeec2a84commit | diff
Use the actual NID for provided signature algorithms

Prior to this change we could confuse the nid used in the pkey with the
nid in the sigalg and mistakenly accept signatures by the wrong algorithm.

Fixes #28762

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29019)
ssl/t1_lib.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git