CVS: cvs.openbsd.org: src

Rafael Sadowski <[email protected]> Mon, 20 Jul 2026 11:41:07 -0600 (MDT)
Newsgroups gmane.os.openbsd.cvs
Message-ID <[email protected]>
CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/07/20 11:41:07

Modified files:
	usr.sbin/relayd: ca.c relay.c relayd.h ssl.c 

Log message:
relayd: add ECDSA support to the CA privsep engine

Add an EC_KEY_METHOD that forwards the sign operation to the CA process,
clone the existing RSA engine. ssl_load_pkey() now handles both RSA
and EC keys and attaches the cert hash accordingly.

The engine and signing code was migrated from smtpd from (op@) with
some tweaks by me.

OK op@