Don't attempt to set provider params on an ENGINE based cipher
authorMatt Caswell <matt@openssl.org>
Wed, 29 Nov 2023 11:45:12 +0000 (11:45 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 12 Dec 2023 16:18:56 +0000 (16:18 +0000)
commited5f9ce63e98da2e7fddd55040c8e9e03f3af975
treec2fb8d6d28ee4e46d10b495f0af19032c602400d
parentdda9208cef52670e6c832cbadaa3e08ad535ac30
Don't attempt to set provider params on an ENGINE based cipher

If an ENGINE has been loaded after the SSL_CTX has been created then
the cipher we have cached might be provider based, but the cipher we
actually end up using might not be. Don't try to set provider params on
a cipher that is actually ENGINE based.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/22865)
ssl/s3_enc.c
ssl/t1_enc.c