[openssl/openssl] 96e678: Allow to pass a passprase callback at store open
Simo Sorce
noreply at github.com
Tue Sep 19 10:27:45 UTC 2023
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 96e678087de25c4bb19ef01492bd04002c3fe315
https://github.com/openssl/openssl/commit/96e678087de25c4bb19ef01492bd04002c3fe315
Author: Simo Sorce <simo at redhat.com>
Date: 2023-09-19 (Tue, 19 Sep 2023)
Changed paths:
M crypto/store/store_lib.c
M crypto/store/store_local.h
M crypto/store/store_meth.c
M include/openssl/core_dispatch.h
Log Message:
-----------
Allow to pass a passprase callback at store open
Some PKCS11 modules require authentication early on to be able to
preload objects, which we want to do to avoid costly roundtrips when the
HSM is actually reached over a network (Cloud HSM).
Unfortunately at open time we can't interact with the user becaue the
callbacks are only passed at object load time. later on.
This patch corrects this issue by providing a more feature rich open
call for providers.
Signed-off-by: Simo Sorce <simo at redhat.com>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20131)
Commit: 64129008fb822758778f7dd29cec6a0a4582e4d2
https://github.com/openssl/openssl/commit/64129008fb822758778f7dd29cec6a0a4582e4d2
Author: Simo Sorce <simo at redhat.com>
Date: 2023-09-19 (Tue, 19 Sep 2023)
Changed paths:
M test/fake_rsaprov.c
M test/fake_rsaprov.h
M test/provider_pkey_test.c
Log Message:
-----------
Add Test to verify open_ex password checking works
Signed-off-by: Simo Sorce <simo at redhat.com>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20131)
Commit: e40d538ad72c8e496b1dfe7d93c6002ce48351f5
https://github.com/openssl/openssl/commit/e40d538ad72c8e496b1dfe7d93c6002ce48351f5
Author: Simo Sorce <simo at redhat.com>
Date: 2023-09-19 (Tue, 19 Sep 2023)
Changed paths:
M doc/man7/provider-storemgmt.pod
Log Message:
-----------
Add provider documentation for the new open_ex
Signed-off-by: Simo Sorce <simo at redhat.com>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20131)
Compare: https://github.com/openssl/openssl/compare/19937db0f276...e40d538ad72c
More information about the openssl-commits
mailing list