DO NOT constify RSA* in RSA_sign() and RSA_verify(), since there are function

called downstream that need it to be non-const.  The fact that the RSA_METHOD
functions take the RSA* as a const doesn't matter, it just expresses that
*they* won't touch it.
PR: 602

diff --git a/crypto/rsa/rsa.h b/crypto/rsa/rsa.h
index 84cc779d1c445b52679e1e34d8a654e9dc6e569c..12689fc22dd5b2fac339cabaf72f9fe27809119e 100644 (file)
--- a/crypto/rsa/rsa.h
+++ b/crypto/rsa/rsa.h
@@ -252,9 +252,9 @@ RSA *d2i_Netscape_RSA(RSA **a, const unsigned char **pp, long length, int (*cb)(
 /* The following 2 functions sign and verify a X509_SIG ASN1 object
  * inside PKCS#1 padded RSA encryption */
 int RSA_sign(int type, const unsigned char *m, unsigned int m_length,
-       unsigned char *sigret, unsigned int *siglen, const RSA *rsa);
+       unsigned char *sigret, unsigned int *siglen, RSA *rsa);
 int RSA_verify(int type, const unsigned char *m, unsigned int m_length,
-       unsigned char *sigbuf, unsigned int siglen, const RSA *rsa);
+       unsigned char *sigbuf, unsigned int siglen, RSA *rsa);
 
 /* The following 2 function sign and verify a ASN1_OCTET_STRING
  * object inside PKCS#1 padded RSA encryption */

diff --git a/crypto/rsa/rsa_sign.c b/crypto/rsa/rsa_sign.c
index 1d47a3139c1c6390bcf0e836ba447fc9c20d962c..02eb8136b05a1f70ebbf7552369c4589b60a89f1 100644 (file)
--- a/crypto/rsa/rsa_sign.c
+++ b/crypto/rsa/rsa_sign.c
@@ -67,7 +67,7 @@
 #define SSL_SIG_LENGTH 36
 
 int RSA_sign(int type, const unsigned char *m, unsigned int m_len,
-            unsigned char *sigret, unsigned int *siglen, const RSA *rsa)
+            unsigned char *sigret, unsigned int *siglen, RSA *rsa)
        {
        X509_SIG sig;
        ASN1_TYPE parameter;
@@ -143,7 +143,7 @@ int RSA_sign(int type, const unsigned char *m, unsigned int m_len,
        }
 
 int RSA_verify(int dtype, const unsigned char *m, unsigned int m_len,
-            unsigned char *sigbuf, unsigned int siglen, const RSA *rsa)
+            unsigned char *sigbuf, unsigned int siglen, RSA *rsa)
        {
        int i,ret=0,sigtype;
        unsigned char *p,*s;