From fc0ec06e7266c39989781f38367be891181178a1 Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Mon, 23 Feb 2026 16:52:43 +0100
Subject: [PATCH] sssd 2.10.2 changes

---
 .github/workflows/sssd.yml |  5 +++--
 src/pk_ec.c                | 31 +++++++++++++++++++++++++++++++
 wolfssl/openssl/ec.h       |  4 ++++
 3 files changed, 38 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/sssd.yml b/.github/workflows/sssd.yml
index b160bf29d7..797a1f4fbf 100644
--- a/.github/workflows/sssd.yml
+++ b/.github/workflows/sssd.yml
@@ -44,7 +44,7 @@ jobs:
       fail-fast: false
       matrix:
         # List of releases to test
-        ref: [ 2.9.1 ]
+        ref: [ 2.9.1, 2.10.2 ]
     name: ${{ matrix.ref }}
     if: github.repository_owner == 'wolfssl'
     runs-on: ubuntu-24.04
@@ -61,7 +61,8 @@ jobs:
           # Don't prompt for anything
           export DEBIAN_FRONTEND=noninteractive
           sudo apt-get update
-          sudo apt-get install -y build-essential autoconf libldb-dev libldb2 python3-ldb bc
+          sudo apt-get install -y build-essential autoconf libldb-dev \
+            libldb2 python3-ldb bc libcap-dev
 
       - name: Setup env
         run: |
diff --git a/src/pk_ec.c b/src/pk_ec.c
index e0300cd0a8..0c66482db6 100644
--- a/src/pk_ec.c
+++ b/src/pk_ec.c
@@ -2824,6 +2824,37 @@ int wolfSSL_EC_POINT_copy(WOLFSSL_EC_POINT *dest, const WOLFSSL_EC_POINT *src)
     return ret;
 }
 
+/* Duplicates an EC point.
+ *
+ * @param [in] src    EC point to duplicate.
+ * @param [in] group  EC group for the new point.
+ * @return  New EC point on success.
+ * @return  NULL on failure.
+ */
+WOLFSSL_EC_POINT *wolfSSL_EC_POINT_dup(const WOLFSSL_EC_POINT *src,
+    const WOLFSSL_EC_GROUP *group)
+{
+    WOLFSSL_EC_POINT *dest;
+
+    WOLFSSL_ENTER("wolfSSL_EC_POINT_dup");
+
+    if ((src == NULL) || (group == NULL)) {
+        return NULL;
+    }
+
+    dest = wolfSSL_EC_POINT_new(group);
+    if (dest == NULL) {
+        return NULL;
+    }
+
+    if (wolfSSL_EC_POINT_copy(dest, src) != 1) {
+        wolfSSL_EC_POINT_free(dest);
+        return NULL;
+    }
+
+    return dest;
+}
+
 /* Checks whether point is at infinity.
  *
  * Return code compliant with OpenSSL.
diff --git a/wolfssl/openssl/ec.h b/wolfssl/openssl/ec.h
index 80674e1a0b..c706761e08 100644
--- a/wolfssl/openssl/ec.h
+++ b/wolfssl/openssl/ec.h
@@ -379,6 +379,9 @@ int wolfSSL_EC_POINT_cmp(const WOLFSSL_EC_GROUP *group,
 WOLFSSL_API int wolfSSL_EC_POINT_copy(WOLFSSL_EC_POINT *dest,
                                       const WOLFSSL_EC_POINT *src);
 WOLFSSL_API
+WOLFSSL_EC_POINT *wolfSSL_EC_POINT_dup(const WOLFSSL_EC_POINT *src,
+                                       const WOLFSSL_EC_GROUP *group);
+WOLFSSL_API
 void wolfSSL_EC_POINT_free(WOLFSSL_EC_POINT *point);
 WOLFSSL_API
 int wolfSSL_EC_POINT_is_at_infinity(const WOLFSSL_EC_GROUP *group,
@@ -479,6 +482,7 @@ typedef WOLFSSL_EC_KEY_METHOD         EC_KEY_METHOD;
 #define EC_POINT_clear_free             wolfSSL_EC_POINT_clear_free
 #define EC_POINT_cmp                    wolfSSL_EC_POINT_cmp
 #define EC_POINT_copy                   wolfSSL_EC_POINT_copy
+#define EC_POINT_dup                    wolfSSL_EC_POINT_dup
 #define EC_POINT_is_at_infinity         wolfSSL_EC_POINT_is_at_infinity
 
 #define EC_get_builtin_curves           wolfSSL_EC_get_builtin_curves