Garbage collect an incoherent export crypto check
authortb <tb@openbsd.org>
Mon, 13 Nov 2023 15:44:15 +0000 (15:44 +0000)
committertb <tb@openbsd.org>
Mon, 13 Nov 2023 15:44:15 +0000 (15:44 +0000)
commit6c43dd5259fb0b855bf13995cf324b97ead995f6
tree33f1a03361b9aa7203542acbf07478aacfde7a43
parentc022789df030604ac3a57ef7e1c7ebf002bb6d14
Garbage collect an incoherent export crypto check

Contrast "#define EVP_PKT_EXP  0x1000 /* <= 512 bit key */" with the diff:

-       /* /8 because it's 1024 bits we look for, not bytes */
-       if (EVP_PKEY_size(pk) <= 1024 / 8)
-               ret |= EVP_PKT_EXP;

EVP_PKT_EXP will be nuked at the next opportunity.

discussed with jsing
lib/libcrypto/x509/x509type.c