On Wed, May 7, 2025 at 1:18 PM Tom Lane <[email protected]> wrote: > So it seems like this might be a simple oversight in > ssl_sigalg_pkey_ok(), which doesn't make any such correction: > > if (sigalg->key_type != EVP_PKEY_id(pkey)) > return 0;
Nice detective work. > Anyone know anything about where to submit LibreSSL bugs? I think it's done with sendbug on an OpenBSD box, or perhaps you can just write a normal email to the [email protected] or [email protected] list, based on: https://www.openbsd.org/mail.html
