diff options
author | jsing <> | 2020-05-19 16:35:21 +0000 |
---|---|---|
committer | jsing <> | 2020-05-19 16:35:21 +0000 |
commit | 6019fdeeec36b84a28e360616bf851bbb984af8c (patch) | |
tree | 5ff7e57b9c4172ec2feea5a8c0a76ee21339a4af /src/lib/libssl/ssl_both.c | |
parent | 301bb2dc3c4393a25056c7a1ec7b1d4a5efe6ea2 (diff) | |
download | openbsd-6019fdeeec36b84a28e360616bf851bbb984af8c.tar.gz openbsd-6019fdeeec36b84a28e360616bf851bbb984af8c.tar.bz2 openbsd-6019fdeeec36b84a28e360616bf851bbb984af8c.zip |
Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.
Some time prior to SSLeay 0.8.1b, SSL_PKEY_RSA_SIGN got added with the
intention of handling RSA sign only certificates... this incomplete code
had the following comment:
/* check to see if this is a signing only certificate */
/* EAY EAY EAY EAY */
And while the comment was removed in 2005, the incomplete RSA sign-only
handling has remained ever since.
Remove SSL_PKEY_RSA_SIGN and rename SSL_PKEY_RSA_ENC to SSL_PKEY_RSA. While
here also remove the unused SSL_PKEY_DH_RSA.
ok tb@
Diffstat (limited to 'src/lib/libssl/ssl_both.c')
-rw-r--r-- | src/lib/libssl/ssl_both.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/lib/libssl/ssl_both.c b/src/lib/libssl/ssl_both.c index b8929d8f84..488a5ff7c9 100644 --- a/src/lib/libssl/ssl_both.c +++ b/src/lib/libssl/ssl_both.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl_both.c,v 1.17 2020/03/12 17:15:33 jsing Exp $ */ | 1 | /* $OpenBSD: ssl_both.c,v 1.18 2020/05/19 16:35:20 jsing Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -591,7 +591,7 @@ ssl_cert_type(X509 *x, EVP_PKEY *pkey) | |||
591 | 591 | ||
592 | i = pk->type; | 592 | i = pk->type; |
593 | if (i == EVP_PKEY_RSA) { | 593 | if (i == EVP_PKEY_RSA) { |
594 | ret = SSL_PKEY_RSA_ENC; | 594 | ret = SSL_PKEY_RSA; |
595 | } else if (i == EVP_PKEY_EC) { | 595 | } else if (i == EVP_PKEY_EC) { |
596 | ret = SSL_PKEY_ECC; | 596 | ret = SSL_PKEY_ECC; |
597 | } else if (i == NID_id_GostR3410_2001 || | 597 | } else if (i == NID_id_GostR3410_2001 || |