Please check, if the following helps also for your environment: https://github.com/naviserver-project/naviserver/commit/08e5d8ffc22d403bcd31b0be1c9eb592e8e583d0
all the best -gn > On 05.05.2025, at 14:13, Gustaf Neumann (sslmail) <neum...@wu.ac.at> wrote: > > Hi Wolfgang, > > At first sight, It looks to me as if there was a change in OpenSSL leading to > the problem. > The error is triggered by OpenSSL’s EVP_CIPHER_CTX_ctrl(). The docu states > [1] > > > EVP_CIPHER_CTX_ctrl(): This is a legacy method…. > > … in versions starting with 3.0. > > When time permits, i will check out the details, > - how the new parameter setting mechanism effect the code (we have 4 > occurrences of this call) > - whether replacing it solves the issue, > - how to make it work with different versions of OpenSSL (pre 3.0.0) > > The strange part is that the aead encrypt/decrypt sequence is in the > regression test, where it continues to work. > … So, maybe this is (also) related with the handling of binary strings in Tcl. > > -g > PS: Is your code for Passkeys and WebAuthn with NaviServer already available > on GithHub, as you mentioned in January? > > > [1] https://docs.openssl.org/3.5/man3/EVP_EncryptInit/#description >
_______________________________________________ naviserver-devel mailing list naviserver-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/naviserver-devel
