diff options
author | Tomas Mraz <tomas@openssl.org> | 2023-12-15 13:45:50 +0100 |
---|---|---|
committer | Tomas Mraz <tomas@openssl.org> | 2024-01-31 18:40:13 +0100 |
commit | 39ea78379826fa98e8dc8c0d2b07e2c17cd68380 (patch) | |
tree | b02d072c8e418af4517010cea5aca74265690a3f /crypto/engine/eng_pkey.c | |
parent | Check all frames for stateless reset conditions (diff) | |
download | openssl-39ea78379826fa98e8dc8c0d2b07e2c17cd68380.tar.xz openssl-39ea78379826fa98e8dc8c0d2b07e2c17cd68380.zip |
Revert "Improved detection of engine-provided private "classic" keys"
This reverts commit 2b74e75331a27fc89cad9c8ea6a26c70019300b5.
The commit was wrong. With 3.x versions the engines must be themselves
responsible for creating their EVP_PKEYs in a way that they are treated
as legacy - either by using the respective set1 calls or by setting
non-default EVP_PKEY_METHOD.
The workaround has caused more problems than it solved.
Fixes #22945
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23063)
Diffstat (limited to 'crypto/engine/eng_pkey.c')
-rw-r--r-- | crypto/engine/eng_pkey.c | 42 |
1 files changed, 0 insertions, 42 deletions
diff --git a/crypto/engine/eng_pkey.c b/crypto/engine/eng_pkey.c index a8f1371a79..6e6d6df35b 100644 --- a/crypto/engine/eng_pkey.c +++ b/crypto/engine/eng_pkey.c @@ -79,48 +79,6 @@ EVP_PKEY *ENGINE_load_private_key(ENGINE *e, const char *key_id, ERR_raise(ERR_LIB_ENGINE, ENGINE_R_FAILED_LOADING_PRIVATE_KEY); return NULL; } - /* We enforce check for legacy key */ - switch (EVP_PKEY_get_id(pkey)) { - case EVP_PKEY_RSA: - { - RSA *rsa = EVP_PKEY_get1_RSA(pkey); - EVP_PKEY_set1_RSA(pkey, rsa); - RSA_free(rsa); - } - break; -# ifndef OPENSSL_NO_EC - case EVP_PKEY_SM2: - case EVP_PKEY_EC: - { - EC_KEY *ec = EVP_PKEY_get1_EC_KEY(pkey); - EVP_PKEY_set1_EC_KEY(pkey, ec); - EC_KEY_free(ec); - } - break; -# endif -# ifndef OPENSSL_NO_DSA - case EVP_PKEY_DSA: - { - DSA *dsa = EVP_PKEY_get1_DSA(pkey); - EVP_PKEY_set1_DSA(pkey, dsa); - DSA_free(dsa); - } - break; -#endif -# ifndef OPENSSL_NO_DH - case EVP_PKEY_DH: - { - DH *dh = EVP_PKEY_get1_DH(pkey); - EVP_PKEY_set1_DH(pkey, dh); - DH_free(dh); - } - break; -#endif - default: - /*Do nothing */ - break; - } - return pkey; } |