Fix building against LibreSSL#482
Conversation
|
This PR is a good start, but signature validation is still broken with LibreSSL. v3.14.8 built against OpenSSL on OpenBSD works: but both v3.14.8 and latest HEAD (d9fd053) built with this PR fail with |
This was due to lack of RFC 5035 support in LibreSSL. I added the missing pieces such that latest libdigidocpp HEAD (06a755d) can now successfully validate documents on OpenBSD/LibreSSL (with uncommitted changes): |
|
Latest LibreSSL is now able to validate libdigidocpp's timestamps: openbsd/src@9c1c430 |
LibreSSL does not provide any SHA3 implementation, thus make the code OpenSSL-only. Signed-off-by: Klemens Nanni <klemens@posteo.de>
LibreSSL doesn't have BIO_ADDR support, so this exception cannot be hit. Signed-off-by: Klemens Nanni <klemens@posteo.de>
LibreSSL does not provide these. Signed-off-by: Klemens Nanni <klemens@posteo.de>
Signed-off-by: Klemens Nanni <klemens@posteo.de>
LibreSSL does provide d2i_ESS_ISSUER_SERIAL(). Signed-off-by: Klemens Nanni <klemens@posteo.de>
|
Updated with the following:
0: https://github.com/openssl/openssl/blob/OpenSSL_1_1_1-stable/crypto/mem.c#L200-L201 |
With the upcoming 3.6 release LibreSSL will ship
X509_VERIFY_PARAM_get_time()as required by libdigidocpp.Furthermore, the following changes are required to build latest HEAD against
current LibreSSL:
All patches patches were written by @botovq against the 3.14.8 release during
review of my OpenBSD ports/package submission for libdigidocpp[0].
I rebased the patches onto latest HEAD (d9fd053) and retested on
OpenBSD/amd64 7.1 -CURRENT, i.e. today's latest LibreSSL development version.
0: openbsd/ports@a015763