openssl-sys: add more functions to replace non-deprecated ones #2457
Conversation
huwcbjones
commented
Sep 3, 2025
- sys/evp: add EVP_PKEY_check
- sys/ec: add EC_GROUP_dup
- sys/evp: add EVP_PKEY2PKCS8
- sys/ssl: add SSL_set1_groups_list
- sys/ssl: add set_dh auto + tmp funcs
|
test failures on OpenSSL 1.1.0 look real |
|
The EVP_PKEY_*check functions were only added in 1.1.1. Are these really necessary? They're rather terrible and have had a good share of DoS issues associated with them. |
Unless you've got a better idea to replace DH_check, RSA_check, DSA_check, etc that isn't these functions that are explicitly mentioned in the ossl deprecation migration guide, then sure, I'm certainly open to better alternatives! Source: https://docs.openssl.org/3.2/man3/DH_generate_parameters/#description |
|
I know... Unfortunately, there really isn't. Ignore my grumblings :) |
ed19259 to
663137f
Compare
|
Whoops, yep that's my bad on the EVP_PKEY_*check. Tested with 3.5 and 1.1 locally - but it was 1.1.1, not 1.1.0 (+ I misread the man page)! Should be fixed 🤞🏻 |