[Bug 1971000] [NEW] EC keys do not provide OSSL_PKEY_PARAM_MANDATORY_DIGEST

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Luca Boccassi (bluca):

[ Impact ]
Mandatory digest is not provided by the library

[ Test Plan ]
The upstream fix includes a test script:

https://github.com/tpm2-software/tpm2-openssl/blob/5f55ad3f7fee12201187a29b648e4bc571bcf9fa/test/ec_createak_x509_cms.sh

[ Where problems could occur ]
The fix adds a small change in the core of the library, so basic functionality like signing might be affected. However, the fix has been upstream and released for half a year and no regressions have been reported.

[ Original Description ]
$ lsb_release -rd
Description: Ubuntu 22.04 LTS
Release: 22.04

$ apt-cache policy tpm2-openssl
tpm2-openssl:
  Installed: 1.0.1-1
  Candidate: 1.0.1-1
  Version table:
 *** 1.0.1-1 500
        500 http://archive.ubuntu.com/ubuntu jammy/universe amd64 Packages
        100 /var/lib/dpkg/status

Please see:  https://github.com/tpm2-software/tpm2-openssl/issues/34

Essentially, any mandatory digest in a public key is ignored by
tpm2-openssl.

** Affects: tpm2-openssl (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
EC keys do not provide OSSL_PKEY_PARAM_MANDATORY_DIGEST
https://bugs.launchpad.net/bugs/1971000
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.