[qca] [Bug 482819] kwalletd6 sometimes crashed in QCA::PrivateKey::deriveKey when starting Proton VPN GUI

[Matt Fagnani]

https://bugs.kde.org/show_bug.cgi?id=482819

--- Comment #19 from Matt Fagnani <matt.fagnani at bell.net> ---
I tried setting the legacy fedora crypto policy which allows DH keys >= 1024
bits with sudo update-crypto-policies --set LEGACY and rebooting but the
problem still happened. I also built kwallet with const auto dlGroup =
QCA::DLGroup(keygen.createDLGroup(QCA::IETF_2048)); at
/usr/src/debug/kf6-kwallet-6.0.0-1.fc40.x86_64/src/runtime/kwalletd/kwalletfreedesktopservice.cpp:415,
but the problem happened with that change too.

I created my wallet with "Classic, blowfish encrypted file" in the kwallet
wizard. Blowfish is listed on the OpenSSL legacy providers page at
https://www.openssl.org/docs/man3.0/man7/OSSL_PROVIDER-legacy.html Since the
first bad commit involved OpenSSL legacy providers, could the use of Blowfish
be involved in this problem somehow?

-- 
You are receiving this mail because:
You are the assignee for the bug.