Skip to content
This repository has been archived by the owner on Sep 29, 2024. It is now read-only.

OpenSSL 3 regressions in HMAC algorithms #403

Closed
2 tasks done
keeshux opened this issue Jan 5, 2024 · 3 comments
Closed
2 tasks done

OpenSSL 3 regressions in HMAC algorithms #403

keeshux opened this issue Jan 5, 2024 · 3 comments
Assignees
Labels
OpenVPN regression Used to work but doesn't anymore

Comments

@keeshux
Copy link
Member

keeshux commented Jan 5, 2024

Might well be two symptoms of the same illness:

@keeshux keeshux self-assigned this Jan 5, 2024
@keeshux keeshux added the regression Used to work but doesn't anymore label Jan 5, 2024
@keeshux keeshux transferred this issue from passepartoutvpn/passepartout Jan 5, 2024
@keeshux keeshux added the OpenVPN label Jan 5, 2024
@keeshux
Copy link
Member Author

keeshux commented Jan 5, 2024

Got one OpenSSL failure at this line:

TUNNEL_CRYPTO_TRACK_STATUS(code) EVP_MAC_init(ctx, self.hmacKeyEnc.bytes, self.hmacKeyEnc.count, self.macParams);

right after "TLS.connect: Handshake is complete".

@keeshux keeshux changed the title OpenSSL regressions in 2.3.0 OpenSSL 3 regressions in HMAC algorithms Jan 5, 2024
@keeshux
Copy link
Member Author

keeshux commented Jan 5, 2024

As weird as it sounds, the above issue is resolved by not reusing the OSSL_PARAM structure for HMAC. Unless I corrupt it at some point, which is very hard to track down.

@keeshux
Copy link
Member Author

keeshux commented Jan 5, 2024

#405 doesn't fix error 203.

@keeshux keeshux added this to the Upgrade to OpenSSL 3 milestone Jan 5, 2024
@keeshux keeshux closed this as completed Jan 5, 2024
@keeshux keeshux moved this from In Progress to Done in 2024 Q1-Q4 Passepartout v3 Jan 5, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
OpenVPN regression Used to work but doesn't anymore
Projects
None yet
Development

No branches or pull requests

1 participant