Changeset 100445 in vbox for trunk/src/VBox

Timestamp:

Jul 8, 2023 2:58:50 PM (17 months ago)

Author:

vboxsync

Message:

IPRT,OpenSSL: Support ECDSA for verficiation purposes when IPRT links with OpenSSL. This required quite a bit of cleanups, so not entirely no-risk. [build fixes] bugref:10479 ticketref:21621

Location:

trunk/src/VBox/Runtime/common/crypto

Files:

• key-openssl.cpp (modified) (2 diffs)
• pkix-signature-ossl.cpp (added)

trunk/src/VBox/Runtime/common/crypto/key-openssl.cpp

@@ -72 +72 @@
         || hKey->enmType == RTCRKEYTYPE_ECDSA_PRIVATE)
     {
+# if OPENSSL_VERSION_NUMBER >= 0x30000000 && !defined(LIBRESSL_VERSION_NUMBER)
         void          *pvFree = NULL;
         const uint8_t *pbRaw  = NULL;
@@ -90 +91 @@
             RTMemTmpFree(pvFree);
         }
+#else
+        /** @todo d2i_KeyParams was introduced with 3.0.0, so ECDSA stuff won't work
+         *        with older openssl versions atm.  Fortunately we only really needs
+         *        it on Windows atm., so no problem. */
+        rc = RTERRINFO_LOG_SET_F(pErrInfo, VERR_NOT_SUPPORTED,
+                                 "OpenSSL version %#x is too old for IPRTs ECDSA code", OPENSSL_VERSION_NUMBER);
+#endif
     }
     return rc;