common/cert_vfy: Fix signature verification for libssl3 (!3) · Merge requests · Debian / pam-pkcs11 · GitLab

Olivier Martin requested to merge olivier/pam-pkcs11:cert_vfy-libssl3 into master Feb 03, 2023

Before seeing Paul Wolneykie changes https://github.com/OpenSC/pam_pkcs11/commit/75fe90e29b35593a6a07ffc77b7f26bd611bf5a0, I wrote an almost similar changes. So I kept Paul's changes to ease its integration in debian/pam-pkcs11:master.

This issue has been seen while using it on Ubuntu 22.04 (failed with segfault). Ubuntu maintainers have rebuilt this package with libssl3: http://changelogs.ubuntu.com/changelogs/pool/universe/p/pam-pkcs11/pam-pkcs11_0.6.11-4build2/changelog - that's why I added the #if OPENSSL_VERSION_NUMBER < 0x30000000L to support different Debian-based distribution.