Re: [krbdev.mit.edu #9180] pkinit preauth plugin create_signature calls EVP_PKEY_size() instead of EVP_PKEY_get_size()
"David Morash via RT" <[email protected]> Thu, 17 Jul 2025 17:08:38 -0400
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <rt-4.4.3-2-2844090-1752786518-1405.9180-5-0@kerborg-prod-app-1.mit.edu> |
<URL: http://kerborg-prod-app-1.mit.edu/rt/Ticket/Display.html?id=9180 > Hmmm... must be something in how we are building. I'll dig into it and see if I can spot why. We also had to rename a couple of EVP_PKEY_size() calls in our own code. On 2025-07-17 3:23 p.m., Greg Hudson via RT wrote: > There is indeed a missed rename there, and another one in encode_spki() > for EVP_PKEY_base_id() -> EVP_PKEY_get_base_id(). However, as far as I can > tell OpenSSL 3.x never removed its compatibility macros for EVP_PKEY_size() > and EVP_PKEY_base_id(). In 3.2.5's <openssl/evp.h> I see: > > # define EVP_PKEY_size EVP_PKEY_get_size > > at line 1323. So I don't understand why there was a build failure. >