summaryrefslogtreecommitdiff
path: root/lib/check_sym
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2024-01-13 11:38:46 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2024-01-13 11:38:46 +0000
commit1514ba43d24863dcc91e296fa5b51021130f6c4a (patch)
tree1dba5f80134541ee08450c9172e41d17892eae62 /lib/check_sym
parent535413b097e0ad00727438a0e3d27d6e8117ea00 (diff)
Remove the guts of the OBJ_NAME API
With one exception, none of this is used anymore. All of it will be removed in the next major bump. The exception is OBJ_NAME_add(). scurity/xca ran into issues with their cert renewal logic because RSA certs had a way of mapping the signature algorithms to a hash, but a similar mechanism wasn't available for ECDSA certs. So xca uses EVP_add_digest_alias() to have corresponding aliases for ECDSA. This is a macro wrapping OBJ_NAME_add(). xca now has better logic using the more appropriate OBJ_find_sigid_algs() (which wasn't available back then). We will still add the alias entries that xca still adds ourselves to make sure there are no unexpected side effects. They make sense anyway. The diff will hopefully land in a few days. If your life depends on ECDSA cert renewal in xca please hold off on updating to a new snap. ok jsing
Diffstat (limited to 'lib/check_sym')
0 files changed, 0 insertions, 0 deletions