linux-kernel - Re: [PATCH 3/3] sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <900fcce8cdce254e73864c653743370108fd0555.camel@iki.fi>
Date: Tue, 13 Aug 2024 13:23:13 +0300
From: Jarkko Sakkinen <jarkko.sakkinen@....fi>
To: Jan Stancek <jstancek@...hat.com>, dhowells@...hat.com,
 dwmw2@...radead.org,  zxu@...hat.com, keyrings@...r.kernel.org
Cc: linux-kernel@...r.kernel.org
Subject: Re: [PATCH 3/3] sign-file,extract-cert: use pkcs11 provider for
 OPENSSL MAJOR >= 3

On Fri, 2024-07-12 at 09:11 +0200, Jan Stancek wrote:
> ENGINE API has been deprecated since OpenSSL version 3.0 [1].
> Distros have started dropping support from headers and in future
> it will likely disappear also from library.
> 
> It has been superseded by the PROVIDER API, so use it instead
> for OPENSSL MAJOR >= 3.
> 
> [1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md
> 
> Signed-off-by: Jan Stancek <jstancek@...hat.com>

Reviewed-by: Jarkko Sakkinen <jarkko@...nel.org>

I think all these somewhat "dead obvious" patches. Not much to comment
on these.

BR, Jarkko