3 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Gerardo Ravago	e56b597af1	openssl: Condition out unsupported curves for AWS-LC ... AWS-LC lacks support for a number of elliptic curve algorithms so this adds some conditional macros to avoid registering the related plugin features. Support for curves ed448 and x448 is completely absent and are not planned for implementation as they are no longer recommended for use. While ed25519 is supported by the library, a single missing API for ASN.1 DER encoding of its private keys is missing which prevents its use in strongSwan. Future work may remove this limitation, but for now we will disable the functionality. Closes strongswan/strongswan#2109	2024-02-21 08:42:48 +01:00
Gerardo Ravago	7f1ba3cc68	openssl: Add conditional macros around SHA_CTX for AWS-LC ... AWS-LC is a BoringSSL-based libcrypto implementation. SHA_CTX is declared with the hash data specified as an array rather than as a field in upstream OpenSSL. Since AWS-LC builds against C99, we are unable to handle this with anonymous unions like BoringSSL. The workaround I propose is to add these conditional macros around the accessors within openssl_sha1_prf. After this change, everything builds successfully with AWS-LC headers. Closes strongswan/strongswan#2103	2024-02-19 10:01:51 +01:00
Gerardo Ravago	31f55ba6e9	openssl: Add missing error checking when encoding ED private key ... This applies the same logic found in other private key implementations like that for ECDSA. Closes strongswan/strongswan#2097	2024-02-14 17:57:41 +01:00