openssl/crypto
Norman Ashley 36871717ac Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP sign
OCSP_basic_sign_ctx() in ocsp_srv.c , does not check for RSA_METHOD_FLAG_NO_CHECK.
If a key has RSA_METHOD_FLAG_NO_CHECK set, OCSP sign operations can fail
because the X509_check_private_key() can fail.

The check for the RSA_METHOD_FLAG_NO_CHECK was moved to crypto/rsa/rsa_ameth.c
as a common place to check. Checks in ssl_rsa.c were removed.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12419)

(cherry picked from commit 56e8fe0b4e)
2020-09-21 11:33:08 +02:00
..
aes Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00
aria
asn1 ENCODER: Adapt calls to the changed OSSL_ENCODER_CTX_new_by_EVP_PKEY() 2020-09-20 17:31:22 +02:00
async
bf
bio NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
bn Diverse build.info: Adjust paths 2020-09-10 09:50:56 +02:00
buffer
camellia
cast
chacha Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00
cmac Delete unused PKEY MAC files 2020-08-29 17:40:11 +10:00
cmp Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
cms Fix safestack issues in ess.h 2020-09-13 11:10:41 +01:00
comp
conf Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
crmf Fix safestack issues in crmf.h 2020-09-13 11:10:41 +01:00
ct Fix safestack issues in ct.h 2020-09-13 11:10:41 +01:00
des
dh Fix coverity issue: CID 1466483 - Improper use of Negative value in dh_ctrl.c 2020-09-12 15:57:24 +10:00
dsa keygen: add FIPS error state management to conditional self tests 2020-09-12 16:46:51 +10:00
dso Fix safestack issues in crypto.h 2020-09-13 11:11:21 +01:00
ec Fix: ecp_nistz256-armv4.S bad arguments 2020-09-20 14:21:15 +02:00
encode_decode DECODER: Some cleanups, and aligning with OSSL_ENCODER 2020-09-20 17:31:54 +02:00
engine Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
err ENCODER: Refactor the OSSL_ENCODER API to be more like OSSL_DECODER 2020-09-20 17:31:22 +02:00
ess Fix safestack issues in ess.h 2020-09-13 11:10:41 +01:00
evp TEST: Adapt applicable tests to the changed OSSL_ENCODER_CTX_new_by_EVP_PKEY() 2020-09-20 17:31:54 +02:00
ffc fix provider signatures 2020-09-18 14:20:39 +01:00
hmac Delete unused PKEY MAC files 2020-08-29 17:40:11 +10:00
http Fix Coverity CID 1466708 - correct pointer calculation in one case 2020-09-17 15:29:46 +02:00
idea
kdf
lhash
md2
md4
md5 In a non-shared build, don't include the md5 object files in legacy provider 2020-09-09 17:59:08 +10:00
mdc2
modes Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00
objects Add 4 new OIDs for PKIX key purposes and 3 new CMP information types 2020-09-08 23:22:29 +02:00
ocsp ocsp_vfy.c: Clean up code w.r.t. coding guidelines and reduce redundancies 2020-09-20 14:32:31 +02:00
pem ENCODER: Adapt calls to the changed OSSL_ENCODER_CTX_new_by_EVP_PKEY() 2020-09-20 17:31:22 +02:00
perlasm
pkcs7 Fix safestack issues in pkcs7.h 2020-09-13 11:10:41 +01:00
pkcs12 PKCS#8: free data on error path in newpass_bag 2020-09-16 07:22:43 +10:00
poly1305 Diverse build.info: Adjust paths 2020-09-10 09:50:56 +02:00
property ENCODER: Redefine the libcrypto <-> provider interface 2020-09-20 17:29:31 +02:00
rand NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
rc2
rc4
rc5
ripemd Diverse build.info: Adjust paths 2020-09-10 09:50:56 +02:00
rsa Support keys with RSA_METHOD_FLAG_NO_CHECK with OCSP sign 2020-09-21 11:33:08 +02:00
seed
sha Ignore vendor name in Clang version number. 2020-08-27 20:27:26 -07:00
siphash Delete unused PKEY MAC files 2020-08-29 17:40:11 +10:00
sm2
sm3
sm4
srp Fix safestack issues in srp.h 2020-09-13 11:10:41 +01:00
stack
store Fix safestack issues in x509.h 2020-09-13 11:09:45 +01:00
ts Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
txt_db
ui Fix safestack issues in ui.h 2020-09-13 11:11:21 +01:00
whrlpool
x509 ENCODER: Adapt calls to the changed OSSL_ENCODER_CTX_new_by_EVP_PKEY() 2020-09-20 17:31:22 +02:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
asn1_dsa.c
bsearch.c
build.info Punycode decoding implementation 2020-08-26 14:04:11 +03:00
c64xpluscpuid.pl
context.c
core_algorithm.c Fix post-condition in algorithm_do_this 2020-09-02 15:21:11 -07:00
core_fetch.c
core_namemap.c
cpt_err.c
cryptlib.c NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
ctype.c
cversion.c
der_writer.c
dllmain.c
ebcdic.c
ex_data.c Ignore unused return values from some sk_*() macros 2020-09-13 11:11:57 +01:00
getenv.c Windows get ENV value as UTF-8 encoded string instead of a raw string 2020-08-22 15:05:56 +10:00
ia64cpuid.S
info.c
init.c STORE: Deprecate legacy / ENGINE functions 2020-09-03 17:48:32 +02:00
initthread.c Fix coverity CID #1454815 - NULL ptr dereference in initthread.c 2020-09-05 15:41:31 +10:00
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c
mem.c
mips_arch.h
o_dir.c
o_fopen.c
o_init.c
o_str.c
o_time.c
packet.c
param_build_set.c
param_build.c
params_from_text.c
params.c OSSL_PARAM: Add string pointer getters 2020-08-24 10:02:26 +02:00
pariscid.pl
passphrase.c CORE: Fix small bug in passphrase caching 2020-09-03 17:48:32 +02:00
ppc_arch.h
ppccap.c
ppccpuid.pl
provider_conf.c Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
provider_core.c STORE: Add a built-in 'file:' storemgmt implementation (loader) 2020-09-03 17:48:32 +02:00
provider_local.h
provider_predefined.c
provider.c provider: disable fall-backs if OSSL_PROVIDER_load() fails. 2020-08-14 18:17:47 +10:00
punycode.c Punycode decoding implementation 2020-08-26 14:04:11 +03:00
README-sparse_array.md
s390x_arch.h
s390xcap.c
s390xcpuid.pl
self_test_core.c Add a copy of OSSL_SELF_TEST_get_callback() to the fips module. 2020-09-19 18:21:09 +10:00
sparc_arch.h
sparccpuid.S
sparcv9cap.c
sparse_array.c
threads_none.c
threads_pthread.c NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
threads_win.c
trace.c
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl