From: Viktor Dukhovni <openssl-users@dukhovni.org>
Date: Fri, 7 Feb 2025 14:54:15 +0000 (+0000)
Subject: Ensure we accept the IANA name for sigalgs
X-Git-Tag: openssl-3.5.0-alpha1~555
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9a6bbf616957cf6fca543ba4604980953c9a3e01;p=thirdparty%2Fopenssl.git

Ensure we accept the IANA name for sigalgs

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26654)
---

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 0318cbc7260..5fc12c5b3b4 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -3558,8 +3558,10 @@ static int sig_cb(const char *elem, int len, void *arg)
             /* Check if a provider supports the sigalg */
             for (i = 0; i < sarg->ctx->sigalg_list_len; i++) {
                 if (sarg->ctx->sigalg_list[i].sigalg_name != NULL
-                    && strcmp(etmp,
-                              sarg->ctx->sigalg_list[i].sigalg_name) == 0) {
+                    && (strcmp(etmp,
+                               sarg->ctx->sigalg_list[i].sigalg_name) == 0
+                        || strcmp(etmp,
+                                  sarg->ctx->sigalg_list[i].name) == 0)) {
                     sarg->sigalgs[sarg->sigalgcnt++] =
                         sarg->ctx->sigalg_list[i].code_point;
                     break;