OpenSSL 3.x moved DES algorithms to the legacy provider. When the legacy
provider is not installed or fails to load, the OpenSSL PMD still reported
DES-CBC and DES-DOCSISBPI as supported capabilities, leading to runtime
failures when applications attempted to use them.

This patch adds a capability filtering step at device init that checks
legacy provider availability and removes DES entries from the reported
capability list when unavailable.

Pratik Senapati (1):
  crypto/openssl: filter legacy ciphers from capability list

 drivers/crypto/openssl/openssl_pmd_private.h |  2 ++
 drivers/crypto/openssl/rte_openssl_pmd.c     |  3 +-
 drivers/crypto/openssl/rte_openssl_pmd_ops.c | 29 +++++++++++++++++++-
 3 files changed, 32 insertions(+), 2 deletions(-)

-- 
2.43.0

Reply via email to