mod_ssl: Fix regression in r1914365 preventing pkcs11: key/cert lookup

via the ENGINE API without SSLCryptoDevice configured.

* modules/ssl/ssl_engine_pphrase.c
  (modssl_load_keypair_engine): Return APR_ENOTIMPL if the ENGINE
  could not be loaded for the key.
  (modssl_load_engine_keypair): Always try loading via ENGINE
  (as prior to r1914365) but fall back to the STORE API for
  the new APR_ENOTIMPL case.

Github: closes #480


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1920597 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Joe Orton
2024-09-12 16:04:39 +00:00
parent b5e9884a48
commit b9588ebe06
2 changed files with 22 additions and 11 deletions

View File

@ -0,0 +1,2 @@
*) mod_ssl: Restore support for loading PKCS#11 keys via ENGINE
without "SSLCryptoDevice" configured. [Joe Orton]