Re: [PATCH 6.1&6.6 V3 3/3] sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3

From: Greg Kroah-Hartman
Date: Wed Mar 19 2025 - 10:17:46 EST


On Wed, Mar 19, 2025 at 02:40:31PM +0800, Huacai Chen wrote:
> From: Jan Stancek <jstancek@xxxxxxxxxx>
>
> commit 558bdc45dfb2669e1741384a0c80be9c82fa052c upstream.
>
> ENGINE API has been deprecated since OpenSSL version 3.0 [1].
> Distros have started dropping support from headers and in future
> it will likely disappear also from library.
>
> It has been superseded by the PROVIDER API, so use it instead
> for OPENSSL MAJOR >= 3.
>
> [1] https://github.com/openssl/openssl/blob/master/README-ENGINES.md
>
> [jarkko: fixed up alignment issues reported by checkpatch.pl --strict]
>
> Signed-off-by: Jan Stancek <jstancek@xxxxxxxxxx>
> Reviewed-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
> Tested-by: R Nageswara Sastry <rnsastry@xxxxxxxxxxxxx>
> Reviewed-by: Neal Gompa <neal@xxxxxxxxx>
> Signed-off-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
> Signed-off-by: Huacai Chen <chenhuacai@xxxxxxxxxxx>
> ---
> certs/extract-cert.c | 103 ++++++++++++++++++++++++++++++-------------
> scripts/sign-file.c | 93 ++++++++++++++++++++++++++------------
> 2 files changed, 138 insertions(+), 58 deletions(-)

This seems to differ from what is upstream by a lot, please document
what you changed from it and why when you resend this series again.

thanks,

greg k-h