]> git.ipfire.org Git - thirdparty/bind9.git/commit
don't set named curves explicitly in pre-3.0 libcrypto
authorAydın Mercan <aydin@isc.org>
Fri, 6 Feb 2026 12:31:40 +0000 (15:31 +0300)
committerAydın Mercan <aydin@isc.org>
Tue, 28 Apr 2026 06:28:18 +0000 (09:28 +0300)
commit48a77a4bfc1285fca0bf6b2023177b273ac29720
tree17805bd0952fe2670e071a7e2ef72f382bb75783
parentd35a527ffb019dde765b92554e557b13f4cf7f1f
don't set named curves explicitly in pre-3.0 libcrypto

The function `EC_KEY_set_asn1_flag` is deprecated in AWS-LC. Fortunately
calling it to make sure we use named curve keys is entirely unnecessary.

More information for pre-3.0 libcrypto and significant forks are as
following:

OpenSSL: Named curves were the default between 1.1.0 and 3.6.1 [1],[2]
AWS-LC: Library only supports named curves in the first place [3]
BoringSSL: Likewise with AWS-LC [4]
LibreSSL: `EC_GROUP`s are named by default [5]

[1] https://github.com/openssl/openssl/commit/86f300d38540ead85543aee0cb30c32145931744
[2] https://github.com/openssl/openssl/commit/9db6af922c48c5cab5398ef9f37e425e382f9440
[3] https://github.com/aws/aws-lc/blob/a605df416bc6ddd0a3b79d728770664ce2302e71/include/openssl/ec_key.h#L442-L445
[4] https://github.com/google/boringssl/blob/514abb73bb80130000b46cf589190c967c6647cd/include/openssl/ec_key.h#L279-L280
[5] https://github.com/libressl/openbsd/blob/c9338745181f31ae01336081edfdb738c0b76d5f/src/lib/libcrypto/ec/ec_lib.c#L94
lib/isc/ossl_wrap/ossl1_1.c