diff options
| author | Kazuki Yamaguchi <[email protected]> | 2022-09-01 15:59:52 +0900 |
|---|---|---|
| committer | Kazuki Yamaguchi <[email protected]> | 2022-10-17 16:35:35 +0900 |
| commit | 65bba0ef6fa104324d34079f107f9c72ed8d0e2f (patch) | |
| tree | 7412ce5484ded42ae9c28aab7e42c0f647a2984d /ext/openssl/lib | |
| parent | bee383d9fe84eb29ec12a8c392fcbf7c646575b8 (diff) | |
[ruby/openssl] hmac: use EVP_PKEY_new_raw_private_key() if available
Current OpenSSL 3.0.x release has a regression with zero-length MAC
keys. While this issue should be fixed in a future release of OpenSSL,
we can use EVP_PKEY_new_raw_private_key() in place of the problematic
EVP_PKEY_new_mac_key() to avoid the issue. OpenSSL 3.0's man page
recommends using it regardless:
> EVP_PKEY_new_mac_key() works in the same way as
> EVP_PKEY_new_raw_private_key(). New applications should use
> EVP_PKEY_new_raw_private_key() instead.
Fixes https://github.com/ruby/openssl/issues/369#issuecomment-1224912710
https://github.com/ruby/openssl/commit/4293f18b1f
Diffstat (limited to 'ext/openssl/lib')
0 files changed, 0 insertions, 0 deletions