Don't attempt to set provider params on an ENGINE based cipher
authorMatt Caswell <matt@openssl.org>
Wed, 29 Nov 2023 11:45:12 +0000 (11:45 +0000)
committerMatt Caswell <matt@openssl.org>
Tue, 12 Dec 2023 16:06:54 +0000 (16:06 +0000)
commitafcc12c41ad82c5b63194502592de015604dbd47
tree7547f4d348a2fbc14a85a2ef17a67abd68b56949
parent7765d25ffe4f2a60b2082d469dec3b40f3418024
Don't attempt to set provider params on an ENGINE based cipher

If an ENGINE has been loaded after the SSL_CTX has been created then
the cipher we have cached might be provider based, but the cipher we
actually end up using might not be. Don't try to set provider params on
a cipher that is actually ENGINE based.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Todd Short <todd.short@me.com>
(Merged from https://github.com/openssl/openssl/pull/22864)
ssl/record/methods/ssl3_meth.c
ssl/record/methods/tls1_meth.c