CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2024/08/22 06:14:33
Modified files: usr.bin/openssl: pkcs12.c Log message: openssl pkcs12: remove support for LMK and CSP attributes Documentation on what the Microsoft-specific local machine keyset and the cryptographic service provider are actually good for is hard to find. For some reason (perhaps one million and two arguments for PKCS12_create() was considered two too many) these hang off the EVP_PKEY in the attributes member, which serves no other purpose. Every use of EVP_PKEY (of which there are far too many) pays extra memory taxes for this fringe use case. This complication is not worth it. ok miod