2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00

Use EVP_PKEY_eq() instead of deprected EVP_PKEY_cmp()

EVP_PKEY_eq() is the replacement with a smaller result range (0, 1)
instead of (-1, 0, 1).  EVP_PKEY_cmp() is mapped to EVP_PKEY_eq() when
building with older versions of OpenSSL.
This commit is contained in:
Mark Andrews
2021-09-08 16:31:56 +10:00
committed by Aram Sargsyan
parent ebea7ee97b
commit 76decb5353
4 changed files with 10 additions and 4 deletions

View File

@@ -32,6 +32,7 @@
#include "dst_internal.h"
#include "dst_openssl.h"
#include "dst_parse.h"
#include "openssl_shim.h"
#ifndef NID_X9_62_prime256v1
#error "P-256 group is not known (NID_X9_62_prime256v1)"
@@ -289,7 +290,7 @@ opensslecdsa_compare(const dst_key_t *key1, const dst_key_t *key2) {
DST_RET(false);
}
status = EVP_PKEY_cmp(pkey1, pkey2);
status = EVP_PKEY_eq(pkey1, pkey2);
if (status != 1) {
DST_RET(false);
}