On Wed, May 7, 2025 at 1:18 PM Tom Lane <t...@sss.pgh.pa.us> wrote: > So it seems like this might be a simple oversight in > ssl_sigalg_pkey_ok(), which doesn't make any such correction: > > if (sigalg->key_type != EVP_PKEY_id(pkey)) > return 0;
Nice detective work. > Anyone know anything about where to submit LibreSSL bugs? I think it's done with sendbug on an OpenBSD box, or perhaps you can just write a normal email to the b...@openbsd.org or libre...@openbsd.org list, based on: https://www.openbsd.org/mail.html
