openssl req: don't try to report bits
authorRichard Levitte <levitte@openssl.org>
Mon, 3 Sep 2018 11:17:03 +0000 (13:17 +0200)
committerRichard Levitte <levitte@openssl.org>
Tue, 4 Sep 2018 12:26:48 +0000 (14:26 +0200)
With the introduction of -pkeyopt, the number of bits may change
without |newkey| being updated.  Unfortunately, there is no API to
retrieve the information from a EVP_PKEY_CTX either, so chances are
that we report incorrect information.  For the moment, it's better not
to try to report the number of bits at all.

Fixes #7086

Reviewed-by: Paul Yang <yang.yang@baishancloud.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/7096)

(cherry picked from commit 17147181bd3f97c53592e2a5c9319b854b954039)

apps/req.c

index 2a2156953a7e449e2bdc9f84326caa37937e72ba..a691f93a114b42cf14db429ade2c5423aec4a525 100644 (file)
@@ -509,8 +509,7 @@ int req_main(int argc, char **argv)
         if (pkey_type == EVP_PKEY_EC) {
             BIO_printf(bio_err, "Generating an EC private key\n");
         } else {
-            BIO_printf(bio_err, "Generating a %ld bit %s private key\n",
-                       newkey, keyalgstr);
+            BIO_printf(bio_err, "Generating a %s private key\n", keyalgstr);
         }
 
         EVP_PKEY_CTX_set_cb(genctx, genpkey_cb);