openssl req: don't try to report bits
authorRichard Levitte <levitte@openssl.org>
Mon, 3 Sep 2018 11:17:03 +0000 (13:17 +0200)
committerRichard Levitte <levitte@openssl.org>
Tue, 4 Sep 2018 12:24:11 +0000 (14:24 +0200)
With the introduction of -pkeyopt, the number of bits may change
without |newkey| being updated.  Unfortunately, there is no API to
retrieve the information from a EVP_PKEY_CTX either, so chances are
that we report incorrect information.  For the moment, it's better not
to try to report the number of bits at all.

Fixes #7086

Reviewed-by: Paul Yang <yang.yang@baishancloud.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/7096)

apps/req.c

index 08a1468ef44bbbd00cd43ef69431ceabc4143a72..6fd28a2aba240656e8480921d7d584fc6b321df8 100644 (file)
@@ -622,8 +622,7 @@ int req_main(int argc, char **argv)
         if (pkey_type == EVP_PKEY_EC) {
             BIO_printf(bio_err, "Generating an EC private key\n");
         } else {
-            BIO_printf(bio_err, "Generating a %ld bit %s private key\n",
-                       newkey, keyalgstr);
+            BIO_printf(bio_err, "Generating a %s private key\n", keyalgstr);
         }
 
         EVP_PKEY_CTX_set_cb(genctx, genpkey_cb);