I have prepared a patch fixing the const-correctness, which I'll post to the request tracker.
It would be nice if the change could be added to the 1.0.2 stable branch. Although it's a header change
it would not break the ABI and force no recompilation of existing code, as far as I understand it,
since there is no name decoration in C. This opion was also shared by Rich Salz recently:
Re: [openssl-dev] Missing API features
On 04/20/2015 10:25 PM, Salz, Rich wrote:>
> Changing the return type here should be binary compatible on any sane platform, but it might cause source incompatibilities.
I think it would be better to correct the error right away, before people start working around it
by casting away the const's in their code.
2) A corresponding RSA_METHOD_*() api is still completely missing (even on master) and the 'struct rsa_meth_st'
members are still publicly visible.
Are there any plans to add it in the near future?
3) Looking at the set of exported functions in util/libeay.num, one sees that the *_METHOD_*() API is still
rather rudimentary. Are there any plans to change this?