diff options
| author | jsing <> | 2020-05-19 16:35:21 +0000 |
|---|---|---|
| committer | jsing <> | 2020-05-19 16:35:21 +0000 |
| commit | 369bbcd163f15f6e452e14282f0a65dafde2f5ab (patch) | |
| tree | 5ff7e57b9c4172ec2feea5a8c0a76ee21339a4af /src/lib/libssl/ssl_both.c | |
| parent | 5ce16e8a6720f50f7054baab450a98b2791794fc (diff) | |
| download | openbsd-369bbcd163f15f6e452e14282f0a65dafde2f5ab.tar.gz openbsd-369bbcd163f15f6e452e14282f0a65dafde2f5ab.tar.bz2 openbsd-369bbcd163f15f6e452e14282f0a65dafde2f5ab.zip | |
Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.
Some time prior to SSLeay 0.8.1b, SSL_PKEY_RSA_SIGN got added with the
intention of handling RSA sign only certificates... this incomplete code
had the following comment:
/* check to see if this is a signing only certificate */
/* EAY EAY EAY EAY */
And while the comment was removed in 2005, the incomplete RSA sign-only
handling has remained ever since.
Remove SSL_PKEY_RSA_SIGN and rename SSL_PKEY_RSA_ENC to SSL_PKEY_RSA. While
here also remove the unused SSL_PKEY_DH_RSA.
ok tb@
Diffstat (limited to '')
| -rw-r--r-- | src/lib/libssl/ssl_both.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libssl/ssl_both.c b/src/lib/libssl/ssl_both.c index b8929d8f84..488a5ff7c9 100644 --- a/src/lib/libssl/ssl_both.c +++ b/src/lib/libssl/ssl_both.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ssl_both.c,v 1.17 2020/03/12 17:15:33 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_both.c,v 1.18 2020/05/19 16:35:20 jsing Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -591,7 +591,7 @@ ssl_cert_type(X509 *x, EVP_PKEY *pkey) | |||
| 591 | 591 | ||
| 592 | i = pk->type; | 592 | i = pk->type; |
| 593 | if (i == EVP_PKEY_RSA) { | 593 | if (i == EVP_PKEY_RSA) { |
| 594 | ret = SSL_PKEY_RSA_ENC; | 594 | ret = SSL_PKEY_RSA; |
| 595 | } else if (i == EVP_PKEY_EC) { | 595 | } else if (i == EVP_PKEY_EC) { |
| 596 | ret = SSL_PKEY_ECC; | 596 | ret = SSL_PKEY_ECC; |
| 597 | } else if (i == NID_id_GostR3410_2001 || | 597 | } else if (i == NID_id_GostR3410_2001 || |
