Skip to content

Fix EVP_PKEY key types handling

Emmanuel Deloget openvpn-devel 1 version In review

Get series with b4
b4 am [email protected]...

Versions newest first

  1. v1 Latest3 patches 6 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3OpenSSL: check EVP_PKEY key types before returning the pkeysrc/openvpn/openssl_compat.h+3 -32 replies
2/3OpenSSL: remove some EVP_PKEY type checkssrc/openvpn/ssl_openssl.c+17 -1618 replies
3/3OpenSSL: remove EVP_PKEY_id()configure.ac src/openvpn/openssl_compat.h+0 -151 reply

Reviews trailers per patch

2 of 3 patches have a Reviewed-by or Acked-by.

PatchSteffan Karger
1/3A-b
2/3
3/3A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [Openvpn-devel] [PATCH 0/3] Fix EVP_PKEY key types handling

Hello,

The dubious commiter of the OpenSSL 1.1 changes got it wrong again. Not sure if I can trust this guy. Not to mention that he pretends to be /me/... :)

Anyway, I fixed some of his mistakes again.

For reference, this fixes a bug reported by Selva (hence the Reported-By tag on the first patch) where openvpn crashes when it's feeded with an ECC key (same bug shall arise when using a DSA key).

The first patch in the series is necessary (it's the one that fixes the bugs). Patch 2 remove code that is no longer necessary. Patch 3 then remove an entire function which is no longer used (although I'd understand if one wants to keep this function around).

Hopefully, this is the last time I have to correct a bug by the previous commiter (I will not name him. That would sound too weird). Next time, he'll have to do it by himself :)

Best regards,

-- Emmanuel Deloget

Emmanuel Deloget (3):
OpenSSL: check EVP_PKEY key types before returning the pkey
OpenSSL: remove some EVP_PKEY type checks
OpenSSL: remove EVP_PKEY_id()

 configure.ac                 |  1 -
 src/openvpn/openssl_compat.h | 20 +++-----------------
 src/openvpn/ssl_openssl.c    | 33 +++++++++++++++++----------------
 3 files changed, 20 insertions(+), 34 deletions(-)
Signature · 1 line
2.11.0