[openssl/openssl] 9d4761: property: do not overwrite the NULL-provider cache...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 9d476175d777c4da1a1b4f218d14b54ef4ba7505
      https://github.com/openssl/openssl/commit/9d476175d777c4da1a1b4f218d14b54ef4ba7505
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-06-18 (Thu, 18 Jun 2026)

  Changed paths:
    M crypto/property/property.c

  Log Message:
  -----------
  property: do not overwrite the NULL-provider cache entry on set

ossl_method_store_cache_set inserts two entries per method: one keyed
on (nid, prop_query, prov) and one keyed on (nid, prop_query) with a
NULL provider, used to match "any provider" lookups.

Previously the set path always replaced the NULL-provider entry. When a
second provider cached the same nid, its method became the result for
"any provider" lookups, even though an earlier provider was already
cached. A shared nid could then resolve to the wrong provider: a
certificate's SPKI would decode through that provider's keymgmt and
X509_check_private_key would fail with a key value mismatch.

Only insert the NULL-provider entry when one does not already exist, so
the first provider to cache the nid owns it, matching the order
ossl_method_store_fetch would select.

Assisted-by: Claude:claude-opus-4-8

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Bob Beck <[email protected]>
Reviewed-by: Simo Sorce <[email protected]>
MergeDate: Thu Jun 18 18:02:32 2026
(Merged from https://github.com/openssl/openssl/pull/31568)


  Commit: 695fef3ec31e360f0e407c3b3f283b9f18711eaa
      https://github.com/openssl/openssl/commit/695fef3ec31e360f0e407c3b3f283b9f18711eaa
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-06-18 (Thu, 18 Jun 2026)

  Changed paths:
    R test/recipes/95-test_external_pkcs11_provider_data/patches/0001-temporarily-disable-tls-test-in-pkcs11.patch

  Log Message:
  -----------
  pkcs11-provider: enable tls test

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Bob Beck <[email protected]>
Reviewed-by: Simo Sorce <[email protected]>
MergeDate: Thu Jun 18 18:02:35 2026
(Merged from https://github.com/openssl/openssl/pull/31568)


Compare: https://github.com/openssl/openssl/compare/3989ab04c606...695fef3ec31e

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/3989ab-695fef%40github.com.