{"id":2225890,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2225890/?format=json","web_url":"http://patchwork.ozlabs.org/project/swupdate/patch/20260421184251.107070-1-bage@debian.org/","project":{"id":58,"url":"http://patchwork.ozlabs.org/api/1.2/projects/58/?format=json","name":"swupdate development","link_name":"swupdate","list_id":"swupdate.googlegroups.com","list_email":"swupdate@googlegroups.com","web_url":"https://github.com/sbabic/swupdate","scm_url":"git://github.com/sbabic/swupdate","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260421184251.107070-1-bage@debian.org>","list_archive_url":null,"date":"2026-04-21T18:42:49","name":"crypto: Make config symbols optional for OpenSSL digest provider","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"53f309bad019bfdde4cc83d4b575b16d99b4e28d","submitter":{"id":84118,"url":"http://patchwork.ozlabs.org/api/1.2/people/84118/?format=json","name":"Bastian Germann","email":"bage@debian.org"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/swupdate/patch/20260421184251.107070-1-bage@debian.org/mbox/","series":[{"id":500869,"url":"http://patchwork.ozlabs.org/api/1.2/series/500869/?format=json","web_url":"http://patchwork.ozlabs.org/project/swupdate/list/?series=500869","date":"2026-04-21T18:42:49","name":"crypto: Make config symbols optional for OpenSSL digest provider","version":1,"mbox":"http://patchwork.ozlabs.org/series/500869/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2225890/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2225890/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=googlegroups.com header.i=@googlegroups.com\n header.a=rsa-sha256 header.s=20251104 header.b=oJXqCUZ/;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=googlegroups.com\n (client-ip=2a00:1450:4864:20::13a; helo=mail-lf1-x13a.google.com;\n envelope-from=swupdate+bncbcn5n5njz4bbbmmkt7hqmgqetz4ajra@googlegroups.com;\n receiver=patchwork.ozlabs.org)"],"Received":["from mail-lf1-x13a.google.com (mail-lf1-x13a.google.com\n [IPv6:2a00:1450:4864:20::13a])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g0WSm68dNz1yHB\n\tfor ; Wed, 22 Apr 2026 04:43:03 +1000 (AEST)","by mail-lf1-x13a.google.com with SMTP id\n 2adb3069b0e04-59e28288067sf5077900e87.2\n for ;\n Tue, 21 Apr 2026 11:43:03 -0700 (PDT)","by 2002:a2e:9e84:0:b0:38e:7ed3:212c with SMTP id\n 38308e7fff4ca-38eab9e2841ls24467141fa.1.-pod-prod-02-eu;\n Tue, 21 Apr 2026 11:42:56 -0700 (PDT)","from stravinsky.debian.org (stravinsky.debian.org.\n [2001:41b8:202:deb::311:108])\n by gmr-mx.google.com with ESMTPS id\n 38308e7fff4ca-38edbceac1asi2321181fa.7.2026.04.21.11.42.55\n for \n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Tue, 21 Apr 2026 11:42:55 -0700 (PDT)","from authenticated user\n\tby stravinsky.debian.org with esmtpsa\n (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)\n\t(Exim 4.96)\n\t(envelope-from )\n\tid 1wFG3i-0013IF-1l;\n\tTue, 21 Apr 2026 18:42:54 +0000"],"ARC-Seal":["i=2; a=rsa-sha256; t=1776796980; cv=pass;\n d=google.com; s=arc-20240605;\n b=XQ3OoCVqqc+Dllb/QSNWLGHY8GbuPb7I4hF78V/nnyf/UtEvzAINsOxFiVoYoYmqhb\n m45qf+BYVfyFzDzWndLNUZdQY6pVNcnhk078ETEcSbPB9OCqU78jXh2HXyHdmfJ3bjU8\n AfwoDqXk5+2tb8A5ZKW7tYrDXrS2qnCJeWVcpyuMZoJ3JX168kTKlb6OJoV36dKI0mJB\n rKOGCH7+u/b+wzyVaBXc3m89p8i1bbT5iZDg6ABfvDW/ug5ADdUytKBwWuJg4KZV+gcc\n 8frWeTU5mxhcLmXyKcSIrx7xEaiR77GWAS4tqmZ4YLEsd3rvX+A7IZAMHfUt2bGKgx12\n ERoQ==","i=1; a=rsa-sha256; t=1776796975; cv=none;\n d=google.com; s=arc-20240605;\n b=CPd3TFhBoAgKhqcBrOZMuLzEG9QtXIigwKJtQw59O5TaOJUXyOkvTjVRE62itSbC9H\n 8K9gWsQwJqx4gHHovhLRbEfeXJRg0jg84R6ddwM+3GmfWk/b7RtUBsi87Dy8fpjj9l5M\n iKAWw9iqHH1XhmnvGR9sYao2G+NHi2LEV55of7nPrdtB7w9P4zDeHgUODWjJG7MccIJf\n tUuSwWCyB9SOEztGrJIyhmmNq5vHFGrcgscfnLPWUjwhm/VnSAi97+wZZ0a6qFMhoI2c\n BFLQEtBHcSxR82JqrDiGKBrh/EM7qd1h7oZ+rNOVMzsgPjTFNPqLFtP31D+z+Lg0gwFt\n /4Qw=="],"ARC-Message-Signature":["i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :list-id:mailing-list:precedence:mime-version:message-id:date\n :subject:cc:to:from:sender:dkim-signature;\n bh=1x6BlLQXRuEbGuJWpJ8NSOd1ILhm08nInII6v54mzOc=;\n fh=lChV4ZvvH8jSuC85Wk9BpCxD7EU4Iu1ZgKbtIY5bDZo=;\n b=HkWWnpF/nH9vl0LsmehjmksS6p9rKztrNE/Amadvy+lzN7Fqdgn9FJtjvvB4JYyVk2\n dRHsx7l1t2rJ488flqs+Sm35bWRrusrrwJQd61IhcWYvewc8DKO1NyNqcg0w8SJ1/fAK\n NXkos62pq9iiGNBuzw8AgkOLZ3N52v/VsUrldb0Dtk39z17kqhQPc//tBIDBwwcpObQ1\n pC0V8Jvl1UFpEJh0A+ElGfNoSWd2hCA/JFQV3Cm9um8s+oKHtfiZ6bVBStTa1ToD4X19\n AEfHQcRaSQ/UZANFY/T1vyzdG6sCctj6RkwcWpp9TjTZo0UVo7dVirjKxtJ8vJoT/1Eq\n 0CKA==;\n darn=patchwork.ozlabs.org","i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com;\n s=arc-20240605;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:dkim-signature;\n bh=t01/kiiB9nHpKZZi0eJjguMwuhZpDymU5MFwHp+g1L0=;\n fh=SFxTw2b8Ua4x6rX/X3nCP9DI7uKEJI/JZJzSqwai/LQ=;\n b=IWe1h5vtZB+z20d2BAojHYMvnHccw9H/Z7pc/oT4Lj4VnLvJhVLoik2W90IIC/DRhc\n lSBxcvmYZZMVVcsGsKyPQrilPM8T/PwDR5046AQRr8GNYfraShrqRBQfTMZRufO/zW5C\n ztZDT5btSRRToM6FCmHFAk0qk4V/x1MCbuSNcZhjF/oHmUlXq/LRhuRhGiXCprITd+Jv\n t7E1uzZ/jZqqjSNwkkHVf4elM4QNOY/SO9ZHcI7dScRBuUmi+mxGJRZ+xtH7LTYSftt2\n bK9jEtpjmDmbFyEwXSMWAfkDSsyQ9m1at7GN9Z3R5cDXcNKMiKE2yurRcuPwXkkHjHIc\n 4P6g==;\n dara=google.com"],"ARC-Authentication-Results":["i=2; gmr-mx.google.com;\n dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=j3S7F8L5;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org","i=1; gmr-mx.google.com;\n dkim=pass header.i=@debian.org header.s=smtpauto.stravinsky\n header.b=j3S7F8L5;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=googlegroups.com; s=20251104; t=1776796980; x=1777401780;\n darn=patchwork.ozlabs.org;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :list-id:mailing-list:precedence:x-original-authentication-results\n :x-original-sender:mime-version:message-id:date:subject:cc:to:from\n :sender:from:to:cc:subject:date:message-id:reply-to;\n bh=1x6BlLQXRuEbGuJWpJ8NSOd1ILhm08nInII6v54mzOc=;\n b=oJXqCUZ/8zBPxFHf669fblqS4aKbTk//t8aa5gmLUkYvMitpM4I0zJhvsgc4HyPMDq\n 2TIGNahS3ohzOVyTLLheBxnT3g6ekKJWY3jbCN7OSg0Z/CxiJ3fPN2JVhjEaym/D0UWA\n ybijmaxhprkJOD4r4GWMrHJ2AVGoo4mAXOW4ZC0wS/iiHceMJ83lM/tEJtBFL0eF1bJe\n cwl8gPxyHzQpUiPlolF1SP7Ru7OqTUgSdCxnLIANd/fTJUGgSvhMMxe1I3u/vsNiBqaJ\n OMgKHR6jQ8DKfdYEF5PsdjbcA15BgPMhcqRE/gKWFx83BuIywRQsM04gBW9GbBe222Ni\n eVbA==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776796980; x=1777401780;\n h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post\n :x-spam-checked-in-group:list-id:mailing-list:precedence\n :x-original-authentication-results:x-original-sender:mime-version\n :message-id:date:subject:cc:to:from:x-beenthere:x-gm-message-state\n :sender:from:to:cc:subject:date:message-id:reply-to;\n bh=1x6BlLQXRuEbGuJWpJ8NSOd1ILhm08nInII6v54mzOc=;\n b=BIsB1WNJbbNKNQV5f/RyHlKRw48Il7yaf7udN6VQhAvCFP9nqDqKv6e1Aalt+ri2j7\n NlAPr5cI2Wznml1fr5VFd4cpY7HabFt6+QcFRmykyBCWFZRRGPcWQdBrKY2EIaeB4vbO\n sBLBfeImrxixqmOCb/1p0B3bwzm/uVL7M4SLNZOCmJfsN/fEAxsFvTXPkExZgMvMsy+L\n B5UiNodCG3X+dFDRSPf0vdWtA4MHnvAW0pHzPI1/04LsvCJW864r77c2+tR6TEYVrwTZ\n owbz4NF7I9I0kjVhVLVPb+ii546cKJhwRnb3sQbgs6oz4k1nW4ubSZhz1AvdRlFPS9V/\n i8tg==","Sender":"swupdate@googlegroups.com","X-Forwarded-Encrypted":"i=2;\n AFNElJ/X/70DwHzYO+vRk7/vvwYYo4zlorW/weTgQYDgF9Mh+EpUEGU5o6PQyf1FOyjTgnAig4xAVxvwcg==@patchwork.ozlabs.org","X-Gm-Message-State":"AOJu0YyNwrHys2phIdzx5vGns6CrYh7kHgc2FBLofZ/tRlKo0dceOliK\n\tUpN63l+ziVnX5ANTbdx97+qpHK6++P27i0pOTf/2+9WkKj72xxIjdmsB","X-Received":["by 2002:a05:6512:158c:b0:5a4:4ea:9982 with SMTP id\n 2adb3069b0e04-5a4172bcc5cmr5732159e87.8.1776796980431;\n Tue, 21 Apr 2026 11:43:00 -0700 (PDT)","by 2002:a05:651c:1994:b0:38d:e330:7ecc with SMTP id\n 38308e7fff4ca-38ec7b64ee4mr62148871fa.33.1776796975724;\n Tue, 21 Apr 2026 11:42:55 -0700 (PDT)"],"X-BeenThere":"swupdate@googlegroups.com;\n h=\"AYAyTiKXKlKrSGVP9+T15qfpFYe41LrUYlyYjavDzxIXzZyduw==\"","Received-SPF":"none (google.com: bage@debian.org does not designate permitted\n sender hosts) client-ip=2001:41b8:202:deb::311:108;","From":"Bastian Germann ","To":"swupdate@googlegroups.com","Cc":"Bastian Germann ","Subject":"[swupdate] [PATCH] crypto: Make config symbols optional for OpenSSL\n digest provider","Date":"Tue, 21 Apr 2026 20:42:49 +0200","Message-ID":"<20260421184251.107070-1-bage@debian.org>","X-Mailer":"git-send-email 2.53.0","MIME-Version":"1.0","X-Debian-User":"bage","X-Original-Sender":"bage@debian.org","X-Original-Authentication-Results":"gmr-mx.google.com; dkim=pass\n header.i=@debian.org header.s=smtpauto.stravinsky header.b=j3S7F8L5;\n spf=none (google.com: bage@debian.org does not designate permitted\n sender hosts) smtp.mailfrom=bage@debian.org","Content-Type":"text/plain; charset=\"UTF-8\"","Precedence":"list","Mailing-list":"list swupdate@googlegroups.com;\n contact swupdate+owners@googlegroups.com","List-ID":"","X-Spam-Checked-In-Group":"swupdate@googlegroups.com","X-Google-Group-Id":"605343134186","List-Post":",\n ","List-Help":",\n ","List-Archive":",\n ","List-Unsubscribe":"\n ,\n "},"content":"The wolfSSL digest provider selects CMS_IGNORE_CERTIFICATE_PURPOSE\n(which it actually implements) and CMS_SKIP_UNKNOWN_SIGNERS. While this\nwas okay with the old single-provider implementation, this has the side\neffect to also affect OpenSSL in builds that contain both crypto\nproviders. Remove the implied selection and instead make the\nOpenSSL-only config symbols' description explain that they are implied\non other providers.\n---\n crypto/Kconfig | 10 ++++------\n 1 file changed, 4 insertions(+), 6 deletions(-)","diff":"diff --git a/crypto/Kconfig b/crypto/Kconfig\nindex ee512456..cf3c6193 100644\n--- a/crypto/Kconfig\n+++ b/crypto/Kconfig\n@@ -11,8 +11,6 @@ menu \"Crypto libraries\"\n \tconfig SSL_IMPL_WOLFSSL\n \t\tbool \"wolfSSL (with OpenSSL compatibility layer)\"\n \t\tdepends on HAVE_WOLFSSL\n-\t\tselect CMS_IGNORE_CERTIFICATE_PURPOSE if SIGALG_CMS\n-\t\tselect CMS_SKIP_UNKNOWN_SIGNERS if SIGALG_CMS\n \n \tconfig SSL_IMPL_MBEDTLS\n \t\tbool \"mbedTLS\"\n@@ -82,12 +80,12 @@ config CMS_IGNORE_CERTIFICATE_PURPOSE\n \tdepends on SIGALG_CMS\n \n config CMS_SKIP_UNKNOWN_SIGNERS\n-\tbool \"Ignore unverifiable signatures if known signer verifies\"\n-\tdepends on SIGALG_CMS\n+\tbool \"Ignore unverifiable signatures if known signer verifies. This is implied for digest providers other than OpenSSL.\"\n+\tdepends on SIGALG_CMS && SSL_IMPL_OPENSSL\n \n config CMS_IGNORE_ADDITIONAL_CERTS\n-\tbool \"Use only direct signer certificates from CMS signature\"\n-\tdepends on SIGALG_CMS\n+\tbool \"Use only direct signer certificates from CMS signature. This is implied for digest providers other than OpenSSL.\"\n+\tdepends on SIGALG_CMS && SSL_IMPL_OPENSSL\n endmenu\n \n menu \"Encryption\"\n","prefixes":[]}