From: Kirill Ermoshin Date: Mon, 22 Jun 2026 09:52:39 +0000 (+0300) Subject: Remove aliases for IANA-GOST2012-GOST8912-GOST8912 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8d7bec32e6c62689f095f97be67b17c0e93f768f;p=thirdparty%2Fopenssl.git Remove aliases for IANA-GOST2012-GOST8912-GOST8912 "gost2012_256/512" sigalgs aliases of IANA-GOST2012-GOST8912-GOST8912 equals to sigalgs of LEAGACY-GOST2012-GOST8912-GOST8912 so we can't distinguish between them for the legacy algorithm Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Bob Beck Reviewed-by: Tomas Mraz MergeDate: Wed Jun 24 15:07:04 2026 (Merged from https://github.com/openssl/openssl/pull/31562) --- diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index 85bed6401d4..b6e487a1ab3 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -2273,16 +2273,14 @@ static const SIGALG_LOOKUP sigalg_lookup_tbl[] = { TLS1_2_VERSION, TLS1_2_VERSION, DTLS1_2_VERSION, DTLS1_2_VERSION }, #ifndef OPENSSL_NO_GOST - { TLSEXT_SIGALG_gostr34102012_256_intrinsic_alias, /* RFC9189 */ - TLSEXT_SIGALG_gostr34102012_256_intrinsic_name, - TLSEXT_SIGALG_gostr34102012_256_intrinsic, + { TLSEXT_SIGALG_gostr34102012_256_intrinsic_name, /* RFC9189 */ + NULL, TLSEXT_SIGALG_gostr34102012_256_intrinsic, NID_id_GostR3411_2012_256, SSL_MD_GOST12_256_IDX, NID_id_GostR3410_2012_256, SSL_PKEY_GOST12_256, NID_undef, NID_undef, 1, 0, TLS1_2_VERSION, TLS1_2_VERSION, DTLS1_2_VERSION, DTLS1_2_VERSION }, - { TLSEXT_SIGALG_gostr34102012_512_intrinsic_alias, /* RFC9189 */ - TLSEXT_SIGALG_gostr34102012_512_intrinsic_name, - TLSEXT_SIGALG_gostr34102012_512_intrinsic, + { TLSEXT_SIGALG_gostr34102012_512_intrinsic_name, /* RFC9189 */ + NULL, TLSEXT_SIGALG_gostr34102012_512_intrinsic, NID_id_GostR3411_2012_512, SSL_MD_GOST12_512_IDX, NID_id_GostR3410_2012_512, SSL_PKEY_GOST12_512, NID_undef, NID_undef, 1, 0,