diff options
author | Arne Schwabe | 2021-10-19 20:31:07 +0200 |
---|---|---|
committer | Gert Doering | 2021-10-27 20:21:22 +0200 |
commit | 7865ffdcbc603894f268d892d638b111e8b61c36 (patch) | |
tree | f390107c005f3e3f774a9c9ccdf0b192c64ce583 /src/openvpn/crypto_backend.h | |
parent | 14e4f3b1583749adf104be362a3e2422e0c9e524 (diff) | |
download | openvpn-7865ffdcbc603894f268d892d638b111e8b61c36.zip openvpn-7865ffdcbc603894f268d892d638b111e8b61c36.tar.gz |
Use new EVP_MAC API for HMAC implementation
The old API is deprecated in OpenSSL 3.0 and the new API does not yet
exist in OpenSSL 1.1. Emulating the new API would be more complex than
just having two implementations. So this switches to a new hmac
implementation for OpenSSL 3.0.
Unfortunately the new API does not have an easy to reset an HMAC,
so we need to keep the key around to emulate a reset functionality.
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Message-Id: <20211019183127.614175-2-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg23013.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/crypto_backend.h')
-rw-r--r-- | src/openvpn/crypto_backend.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/openvpn/crypto_backend.h b/src/openvpn/crypto_backend.h index c201735..cc897ac 100644 --- a/src/openvpn/crypto_backend.h +++ b/src/openvpn/crypto_backend.h @@ -634,7 +634,7 @@ void hmac_ctx_cleanup(hmac_ctx_t *ctx); * * @return Size of the HMAC, or \0 if ctx is NULL. */ -int hmac_ctx_size(const hmac_ctx_t *ctx); +int hmac_ctx_size(hmac_ctx_t *ctx); /* * Resets the given HMAC context, preserving the associated key information |