[Home]

Summary:ASTERISK-30046: Reimplement res/res_crypto.c internals with EVP_PKEY interface to Openssl API's
Reporter:Philip Prindeville (pprindeville)Labels:
Date Opened:2022-05-05 19:30:39Date Closed:2022-09-12 07:55:15
Priority:MinorRegression?No
Status:Closed/CompleteComponents:Resources/res_crypto
Versions:16.25.3 18.11.3 19.3.3 Frequency of
Occurrence
Related
Issues:
causesASTERISK-30343 res_crypto: ast_sign_bin fails with default RedHat crypto policies
is duplicated byASTERISK-30056 res_crypto.c build warnings
Environment:Attachments:
Description:The RSA_* and AES_* API's to Openssl are deprecated in 1.1.x, and will be removed entirely in Openssl 3.1.

A rewrite to use the EVP_PKEY_* API that was introduced in 1.1.x is needed, and it will require minimum changes when migrating to 3.0.
Comments:By: Asterisk Team (asteriskteam) 2022-05-05 19:30:40.992-0500

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution. Please note that log messages and other files should not be sent to the Sangoma Asterisk Team unless explicitly asked for. All files should be placed on this issue in a sanitized fashion as needed.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].

Please note that once your issue enters an open state it has been accepted. As Asterisk is an open source project there is no guarantee or timeframe on when your issue will be looked into. If you need expedient resolution you will need to find and pay a suitable developer. Asking for an update on your issue will not yield any progress on it and will not result in a response. All updates are posted to the issue when they occur.

Please note that by submitting data, code, or documentation to Sangoma through JIRA, you accept the Terms of Use present at [https://www.asterisk.org/terms-of-use/|https://www.asterisk.org/terms-of-use/].

By: Philip Prindeville (pprindeville) 2022-05-05 19:31:03.263-0500

Blocked on ASTERISK-30045.

By: Alexander Traud (traud) 2022-05-27 14:35:10.670-0500

[~pprindeville], thanks for contacting me directly as well (via E-mail). However, why ever, when I try to answer, I get a ‘554: 5.7.1 Message rejected’ from *my* E-mail server. By chance, can you contact me via another E-mail address?

By: Philip Prindeville (pprindeville) 2022-05-27 20:38:24.211-0500

bq. However, why ever, when I try to answer, I get a ‘554: 5.7.1 Message rejected’ from my E-mail server.

[~traud], Sorry, our Spam filters are particularly intolerant of Yahoo! servers.  I got your email... it was in quarantine.

By: Friendly Automation (friendly-automation) 2022-09-12 07:55:17.352-0500

Change 19109 merged by Friendly Automation:
res_crypto: Don't load non-regular files in keys directory

[https://gerrit.asterisk.org/c/asterisk/+/19109|https://gerrit.asterisk.org/c/asterisk/+/19109]

By: Friendly Automation (friendly-automation) 2022-09-12 07:55:36.116-0500

Change 19143 merged by Friendly Automation:
res_crypto: Don't load non-regular files in keys directory

[https://gerrit.asterisk.org/c/asterisk/+/19143|https://gerrit.asterisk.org/c/asterisk/+/19143]

By: Friendly Automation (friendly-automation) 2022-09-12 07:55:44.306-0500

Change 19116 merged by Friendly Automation:
res_crypto: Don't load non-regular files in keys directory

[https://gerrit.asterisk.org/c/asterisk/+/19116|https://gerrit.asterisk.org/c/asterisk/+/19116]

By: Friendly Automation (friendly-automation) 2022-09-12 07:55:50.029-0500

Change 18533 merged by Friendly Automation:
res_crypto: Don't load non-regular files in keys directory

[https://gerrit.asterisk.org/c/asterisk/+/18533|https://gerrit.asterisk.org/c/asterisk/+/18533]

By: Friendly Automation (friendly-automation) 2022-09-12 07:55:55.333-0500

Change 19102 merged by Friendly Automation:
res_crypto: Don't load non-regular files in keys directory

[https://gerrit.asterisk.org/c/asterisk/+/19102|https://gerrit.asterisk.org/c/asterisk/+/19102]

By: Friendly Automation (friendly-automation) 2022-09-12 17:11:25.808-0500

Change 19142 merged by Friendly Automation:
res_crypto: Use EVP API's instead of legacy API's

[https://gerrit.asterisk.org/c/asterisk/+/19142|https://gerrit.asterisk.org/c/asterisk/+/19142]

By: Friendly Automation (friendly-automation) 2022-09-12 18:07:25.739-0500

Change 19115 merged by Friendly Automation:
res_crypto: Use EVP API's instead of legacy API's

[https://gerrit.asterisk.org/c/asterisk/+/19115|https://gerrit.asterisk.org/c/asterisk/+/19115]

By: Friendly Automation (friendly-automation) 2022-09-12 18:07:28.407-0500

Change 19108 merged by Friendly Automation:
res_crypto: Use EVP API's instead of legacy API's

[https://gerrit.asterisk.org/c/asterisk/+/19108|https://gerrit.asterisk.org/c/asterisk/+/19108]

By: Friendly Automation (friendly-automation) 2022-09-12 18:07:32.740-0500

Change 19149 merged by Friendly Automation:
res_crypto: Use EVP API's instead of legacy API's

[https://gerrit.asterisk.org/c/asterisk/+/19149|https://gerrit.asterisk.org/c/asterisk/+/19149]

By: Friendly Automation (friendly-automation) 2022-09-12 18:07:36.194-0500

Change 18534 merged by Friendly Automation:
res_crypto: Use EVP API's instead of legacy API's

[https://gerrit.asterisk.org/c/asterisk/+/18534|https://gerrit.asterisk.org/c/asterisk/+/18534]