On Wed, May 7, 2025 at 1:18 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> So it seems like this might be a simple oversight in
> ssl_sigalg_pkey_ok(), which doesn't make any such correction:
>
> if (sigalg->key_type != EVP_PKEY_id(pkey))
> return 0;
Nice detective work.
> Anyone know anything about where to submit LibreSSL bugs?
I think it's done with sendbug on an OpenBSD box, or perhaps you can
just write a normal email to the bugs@openbsd.org or
libressl@openbsd.org list, based on:
https://www.openbsd.org/mail.html