Skip to content

fix: EC key generation for OpenSSL 3.6+#448

Merged
Minishlink merged 1 commit intoweb-push-libs:masterfrom
eyupcanakman:fix/openssl-3-6-ec-key-gen
Mar 5, 2026
Merged

fix: EC key generation for OpenSSL 3.6+#448
Minishlink merged 1 commit intoweb-push-libs:masterfrom
eyupcanakman:fix/openssl-3-6-ec-key-gen

Conversation

@eyupcanakman
Copy link
Contributor

OpenSSL 3.6 requires EC-specific parameters to be nested under an `ec` sub-array when calling `openssl_pkey_new()`. The flat top-level form fails with:

openssl_pkey_new(): Private key length must be at least 384 bits, configured to 0

Nest both keys inside `['ec' => [...]]`.

Reference

Closes #445

Copy link
Member

@Minishlink Minishlink left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!!

@Minishlink Minishlink merged commit 7b02717 into web-push-libs:master Mar 5, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

openssl_pkey_new() fails on OpenSSL 3.6 - missing private_key_bits parameter

2 participants