Commit 8d7bec32e6 for openssl.org
commit 8d7bec32e6c62689f095f97be67b17c0e93f768f
Author: Kirill Ermoshin <ekd692@gmail.com>
Date: Mon Jun 22 12:52:39 2026 +0300
Remove aliases for IANA-GOST2012-GOST8912-GOST8912
"gost2012_256/512" sigalgs aliases of IANA-GOST2012-GOST8912-GOST8912 equals
to sigalgs of LEAGACY-GOST2012-GOST8912-GOST8912 so we can't distinguish
between them for the legacy algorithm
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Bob Beck <beck@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Wed Jun 24 15:07:04 2026
(Merged from https://github.com/openssl/openssl/pull/31562)
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 85bed6401d..b6e487a1ab 100644
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -2273,16 +2273,14 @@ static const SIGALG_LOOKUP sigalg_lookup_tbl[] = {
TLS1_2_VERSION, TLS1_2_VERSION, DTLS1_2_VERSION, DTLS1_2_VERSION },
#ifndef OPENSSL_NO_GOST
- { TLSEXT_SIGALG_gostr34102012_256_intrinsic_alias, /* RFC9189 */
- TLSEXT_SIGALG_gostr34102012_256_intrinsic_name,
- TLSEXT_SIGALG_gostr34102012_256_intrinsic,
+ { TLSEXT_SIGALG_gostr34102012_256_intrinsic_name, /* RFC9189 */
+ NULL, TLSEXT_SIGALG_gostr34102012_256_intrinsic,
NID_id_GostR3411_2012_256, SSL_MD_GOST12_256_IDX,
NID_id_GostR3410_2012_256, SSL_PKEY_GOST12_256,
NID_undef, NID_undef, 1, 0,
TLS1_2_VERSION, TLS1_2_VERSION, DTLS1_2_VERSION, DTLS1_2_VERSION },
- { TLSEXT_SIGALG_gostr34102012_512_intrinsic_alias, /* RFC9189 */
- TLSEXT_SIGALG_gostr34102012_512_intrinsic_name,
- TLSEXT_SIGALG_gostr34102012_512_intrinsic,
+ { TLSEXT_SIGALG_gostr34102012_512_intrinsic_name, /* RFC9189 */
+ NULL, TLSEXT_SIGALG_gostr34102012_512_intrinsic,
NID_id_GostR3411_2012_512, SSL_MD_GOST12_512_IDX,
NID_id_GostR3410_2012_512, SSL_PKEY_GOST12_512,
NID_undef, NID_undef, 1, 0,