Skip to content

Conversation

@cjpatton
Copy link
Collaborator

@cjpatton cjpatton commented Sep 29, 2025

This API is incompatible with the latest internal FIPS build. Namely, the various group identifiers have been renamed since the previous version.

@cjpatton cjpatton marked this pull request as ready for review September 29, 2025 23:24
@cjpatton cjpatton added the v5 label Sep 29, 2025
This is incompatible with the latest internal FIPS build. Namely, the
various group identifiers have been renamed since the previous version.
@cjpatton cjpatton force-pushed the cjpatton/drop-ssl-curve branch from 975281d to b1dcfbb Compare September 30, 2025 14:39
Instead of returning an `SslCurve`, just return the `u16` returned by
BoringSSL.
@cjpatton cjpatton requested a review from ghedo September 30, 2025 14:52
}

/// Returns the [`SslCurve`] used for this `SslRef`.
/// Returns the curve ID (aka group ID) used for this `SslRef`.
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If upstream BoringSSL is moving to replace "curve" with "group" in their API, then we might want do so here and for set_curves_list as well.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's not clear they are going to replace them since they still provide both names and the "group" APIs were added more than 2 years ago already. "group" is also not really a much better name given PQ... I think it was just for OpenSSL "compatibility".

@ghedo ghedo merged commit 1c51c7e into master Sep 30, 2025
25 checks passed
@kornelski kornelski deleted the cjpatton/drop-ssl-curve branch November 14, 2025 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants