commit 802f4c96216ce8ba445b0fa0a1be479daa94db54
from: tb <tb@openbsd.org>
date: Thu Mar  5 05:30:09 2026 UTC

relayd: replace unneeded engine.h with needed x509.h

Adjust a comment. Being non-existent, the OpenSSL engine layer cannot be
responsible for whatever unholy hacks this code requires.

commit - 18abd06bbeb3591e9b0d2b04d656879d2a33e186
commit + 802f4c96216ce8ba445b0fa0a1be479daa94db54
blob - 43c9f5a1f58a2a31dc1e7636f028617785816c5a
blob + 0a34c5ca7bc64acf232d92b59114b83318ac3d17
--- ca.c
+++ ca.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ca.c,v 1.48 2026/03/02 19:28:01 rsadowski Exp $	*/
+/*	$OpenBSD: ca.c,v 1.49 2026/03/05 05:30:09 tb Exp $	*/
 
 /*
  * Copyright (c) 2014 Reyk Floeter <reyk@openbsd.org>
@@ -31,7 +31,7 @@
 #include <openssl/evp.h>
 #include <openssl/pem.h>
 #include <openssl/rsa.h>
-#include <openssl/engine.h>
+#include <openssl/x509.h>
 
 #include "relayd.h"
 #include "log.h"
@@ -334,7 +334,7 @@ rsae_send_imsg(int flen, const u_char *from, u_char *t
 
 	/*
 	 * Send a synchronous imsg because we cannot defer the RSA
-	 * operation in OpenSSL's engine layer.
+	 * operation in OpenSSL.
 	 */
 	if (imsg_composev(ibuf, cmd, 0, 0, -1, iov, cnt) == -1) {
 		log_warn("%s: imsg_composev", __func__);