RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-01-05 03:29:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

BUILD: ssl: add ECDSA_SIG_set0() for openssl < 1.1 or libressl < 2.7

Browse Source 
Commit 5a8f02ae6 ("BUG/MEDIUM: jwt: Properly process ecdsa signatures
(concatenated R and S params)") makes use of ECDSA_SIG_set0() which only
appeared in openssl-1.1.0 and libressl 2.7, and breaks the build before.
Let's just do what it minimally does (only assigns the two fields to the
destination).

This will need to be backported where the commit above is, likely 2.5.
This commit is contained in:
Willy Tarreau 2023-01-19 10:50:13 +01:00
parent 5a8f02ae66
commit d65791e26c
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
include/haproxy/openssl-compat.h
View File

@ -325,6 +325,13 @@ static inline X509 *X509_STORE_CTX_get0_cert(X509_STORE_CTX *ctx)
{
return ctx->cert;
}
/* note: no error checking, simplified version only */
static inline void ECDSA_SIG_set0(ECDSA_SIG *ecdsa_sig, BIGNUM *ec_R, BIGNUM *ec_S)
{
ecdsa_sig->r = ec_R;
ecdsa_sig->s = ec_S;
}
#endif
#if (HA_OPENSSL_VERSION_NUMBER < 0x3000000fL)