Subject: | Patch: Add support for SSL_set_default_passwd_cb |
Date: | Tue, 28 Nov 2017 16:31:33 +0200 |
To: | bug-Net-SSLeay [...] rt.cpan.org |
From: | Heikki Vatiainen <hvn [...] open.com.au> |
OpenSSL 1.1.0 added SSL_set_default_passwd_cb and
SSL_set_default_passwd_cb_userdata functions. However, these are not
called for SSL object before version 1.1.0f.
The change in 1.1.0f may cause some programs to hang while they wait
input to unlock the secret key. The reason is that the callback set for
a CTX is no longer called for a SSL object.
The attached patch adds support for SSL_set_default_passwd_cb* for
OpenSSL 1.1.0f and later. LibreSSL does not support these functions, at
least yet.
The patch also adds new tests for the new functions and updates some of
the current tests for CTX_set_default_passwd_cb* functions.
The updated test may be useful as an example of detecting the
availability of SSL_set_default_passwd_cb.
Here are some links with more information:
https://github.com/openssl/openssl/pull/2870
https://github.com/openssl/openssl/issues/3594
--
Heikki Vatiainen <hvn@open.com.au>
Message body is not shown because sender requested not to inline it.