]> git.ipfire.org Git - thirdparty/bind9.git/commit
Do not use OSSL_PARAM when engine API is compiled
authorPetr Menšík <pemensik@redhat.com>
Thu, 8 Sep 2022 15:19:20 +0000 (17:19 +0200)
committerMark Andrews <marka@isc.org>
Fri, 23 Sep 2022 04:07:14 +0000 (14:07 +1000)
commitd6806c9fe7ac42b7da32a2b6980296ecf21c4ccc
tree22721a35505f84e243496cbc64de2b1bb93e213a
parent306f1008cc52258571eac6853c9ed6e4436d77ec
Do not use OSSL_PARAM when engine API is compiled

OpenSSL has deprecated many things in version 3.0. If pkcs11 engine
should work then no builder from OpenSSL 3.0 API can be used.

Allow switching to OpenSSL 1.1 like calls even on OpenSSL 3.0 when
OPENSSL_API_COMPAT=10100 is defined. It would still compile and allow
working keys loading from the engine passed on command line.

(cherry picked from commit f92950bb6490dcbc0e09cfae814fbd27423c4410)
lib/dns/openssldh_link.c
lib/dns/opensslecdsa_link.c
lib/dns/opensslrsa_link.c