diff --git a/src/libstrongswan/utils/leak_detective.c b/src/libstrongswan/utils/leak_detective.c index 0476353ad..5e3be5acc 100644 --- a/src/libstrongswan/utils/leak_detective.c +++ b/src/libstrongswan/utils/leak_detective.c @@ -597,6 +597,29 @@ static char *whitelist[] = { "RAND_DRBG_get0_master", "RAND_DRBG_get0_private", "RAND_DRBG_get0_public", + /* OpenSSL 3.0 caches even more static stuff */ + "ERR_set_debug", + "ERR_set_error", + "EVP_DigestSignInit", + "EVP_DigestVerifyInit", + "EVP_PKEY_encrypt_init", + "EVP_PKEY_decrypt_init", + "EVP_PKEY_derive_init", + "EVP_PKEY_sign_init", + "EVP_ASYM_CIPHER_fetch", + "EVP_CIPHER_fetch", + "EVP_KDF_fetch", + "EVP_KEYEXCH_fetch", + "EVP_KEYMGMT_fetch", + "EVP_MAC_fetch", + "EVP_MD_fetch", + "EVP_SIGNATURE_fetch", + "OSSL_DECODER_do_all_provided", + "OSSL_ENCODER_do_all_provided", + "OSSL_PROVIDER_try_load", + "OSSL_PROVIDER_load", + "RAND_get0_private", + "RAND_get0_public", /* We get this via libcurl and OpenSSL 1.1.1 */ "CRYPTO_get_ex_new_index", /* OpenSSL libssl */