openssl/openssl

Internal technical debt: Active internal calls to legacy function EVP_CIPHER_CTX_ctrl

Open

#31 358 ouverte le 2 juin 2026

Voir sur GitHub
 (2 commentaires) (0 réactions) (0 assignés)C (11 262 forks)batch import
help wantedtriaged: refactor

Métriques du dépôt

Stars
 (30 157 stars)
Métriques de merge PR
 (Aucune PR mergée en 30 j)

Description

Description: While analyzing internal function selection within OpenSSL using dynamic tracing, we noticed that OpenSSL's internal code paths do not fully adhere to the project's own public migration policies.

Specifically, there are active internal calls being made to EVP_CIPHER_CTX_ctrl. This function was officially deprecated in OpenSSL 3.0, and the official documentation strongly recommends migrating to the OSSL_PARAM interface for these operations.

Expected Behavior: OpenSSL's internal implementation should migrate away from deprecated legacy APIs and utilize the modern OSSL_PARAM interface internally, matching the guidelines provided to external developers.

Steps to Reproduce / Analysis Method: We identified this by monitoring the dependencies required to lift traces and observing the underlying API calls used in protocol implementations.

Guide contributeur