Reject inappropriate private key encryption ciphers.
authorDr. Stephen Henson <steve@openssl.org>
Sat, 23 Apr 2016 12:33:05 +0000 (13:33 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 27 Apr 2016 23:04:48 +0000 (00:04 +0100)
commitd78df5dfd650e6de159a19a033513481064644f5
tree794e5ef89c0948199d64dfb240a9680964b6165e
parent4a397f5168d41ef4417f1430f2f5133b92f145b8
Reject inappropriate private key encryption ciphers.

The traditional private key encryption algorithm doesn't function
properly if the IV length of the cipher is zero. These ciphers
(e.g. ECB mode) are not suitable for private key encryption
anyway.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
crypto/pem/pem_lib.c