Commit 7b4d3ffa authored by Matt Caswell's avatar Matt Caswell
Browse files

GOST MAC algorithms don't support EVP_PKEY_new_raw_private_key() 



We should use the old EVP_PKEY_new_mac_key() instead.

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5808)
parent 83cf3423

ssl/t1_enc.c

+1 −1
Original line number Diff line number Diff line
@@ -257,7 +257,7 @@ int tls1_change_cipher_state(SSL *s, int which) 


    if (!(EVP_CIPHER_flags(c) & EVP_CIPH_FLAG_AEAD_CIPHER)) {

        /* TODO(size_t): Convert this function */

        mac_key = EVP_PKEY_new_raw_private_key(mac_type, NULL, mac_secret,

        mac_key = EVP_PKEY_new_mac_key(mac_type, NULL, mac_secret,

                                               (int)*mac_secret_size);

        if (mac_key == NULL

            || EVP_DigestSignInit(mac_ctx, NULL, m, NULL, mac_key) <= 0) {