CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/06 06:59:42
Modified files:
lib/libssl : s3_lib.c ssl_kex.c ssl_local.h tls_internal.h
tls_key_share.c
Log message:
Return a real X25519 key from SSL_get_peer_tmp_key()
The X25519 peer temporary key was a dummy EC_KEY. It was made by taking
a P-256 group from EC_GROUP_new_by_curve_name(), overwriting its
generator and order, and renaming it NID_X25519. It held no public key,
so callers could get only a name from it. It also modified a built-in
group, which gets in the way of making built-in groups immutable.
Return an EVP_PKEY_X25519 holding the peer's public key instead, now
that X25519 has an EVP_PKEY type. The internal tls_key_share_peer_pkey()
now allocates the EVP_PKEY it returns
ok tb@
