[krbdev.mit.edu #9180] pkinit preauth plugin create_signature calls EVP_PKEY_size() instead of EVP_PKEY_get_size()

This is a multi-part message in MIME format...

------------=_1752775834-2837457-0
Content-Type: text/plain; charset="utf-8"


Thu Jul 17 14:10:34 2025: Request 9180 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: pkinit preauth plugin create_signature calls EVP_PKEY_size() instead of EVP_PKEY_get_size()
       Owner: Nobody
  Requestors: [email protected]
      Status: new
 Ticket <URL: http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9180 >


I wasn't able to build krb5 against openssl 3.2.5 as the pkinit plugin 
create_signature calls EVP_PKEY_size() instead of EVP_PKEY_get_size().

Other functions in src/plugins/preauth/pkinit/pkinit_crypto_openssl.c 
call EVP_PKEY_get_size(), so I assume this is just a missed renaming.

Patch attached if this is of any use.

Let me know if there is a better process to follow here.

------------=_1752775834-2837457-0
Content-Type: text/plain;
 charset="utf-8";
 name="pkinit-plugin-EVP_PKEY_get_size.patch"
Content-Disposition: attachment;
 filename="pkinit-plugin-EVP_PKEY_get_size.patch"
Content-Transfer-Encoding: 7bit
RT-Attachment: 9180/103681/25861

diff --git a/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c b/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
index cb9c79626..22e7df505 100644
--- a/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
+++ b/src/plugins/preauth/pkinit/pkinit_crypto_openssl.c
@@ -4038,7 +4038,7 @@ create_signature(unsigned char **sig, unsigned int *sig_len,
         return ENOMEM;
     EVP_SignInit(ctx, EVP_sha256());
     EVP_SignUpdate(ctx, data, data_len);
-    *sig_len = EVP_PKEY_size(pkey);
+    *sig_len = EVP_PKEY_get_size(pkey);
     if ((*sig = malloc(*sig_len)) == NULL)
         goto cleanup;
     EVP_SignFinal(ctx, *sig, sig_len, pkey);


------------=_1752775834-2837457-0
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
krb5-bugs mailing list
[email protected]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

------------=_1752775834-2837457-0--