[openssh-commits] [openssh] 01/04: Make EC_KEY_METHOD_new optional again.

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

dtucker pushed a commit to branch master
in repository openssh.

commit e766b76b6112c9327f73b834af00e00da13ab981
Author: Darren Tucker <dtucker at dtucker.net>
AuthorDate: Mon Aug 3 18:19:58 2026 +1000

    Make EC_KEY_METHOD_new optional again.
    
    The change making ECC required also incorrectly made EC_KEY_METHOD_new
    required, causing builds with BoringSSL to fail.
---
 configure.ac | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index c4fdd5d19..6d81f9663 100644
--- a/configure.ac
+++ b/configure.ac
@@ -3302,13 +3302,13 @@ if test "x$openssl" = "xyes" ; then
 		EC_KEY *e = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
 		EC_KEY *f = EC_KEY_new_by_curve_name(NID_secp384r1);
 		EC_KEY *g = EC_KEY_new_by_curve_name(NID_secp521r1);
-		/* Also require EC_KEY_METHOD support for ECDSA PKCS#11 */
-		void *h = EC_KEY_METHOD_new(NULL);
 		const EVP_MD *m = EVP_sha256(); /* We need this too */
 		]])],
 		[ AC_MSG_RESULT([yes]) ],
 		[ AC_MSG_ERROR([libcrypto does not have required ECC support]) ]
 	)
+	# Check for EC_KEY_METHOD support for ECDSA PKCS#11
+	AC_CHECK_FUNCS([EC_KEY_METHOD_new])
 
 	# Check libcrypto ED25519 support
 	AC_CHECK_FUNCS([EVP_PKEY_get_raw_public_key])

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.