Commit 14ed05f86bd for nodejs

commit 14ed05f86bd6c2309f07a29edaa64c3a0ce01728
Author: Filip Skokan <panva.ip@gmail.com>
Date:   Wed Oct 21 20:28:05 2026 +0200

    crypto: fix BoringSSL RSA-PSS macro redefinitions

    Signed-off-by: Filip Skokan <panva.ip@gmail.com>
    PR-URL: https://github.com/nodejs/node/pull/66900
    Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
    Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>

diff --git a/src/node_constants.cc b/src/node_constants.cc
index 9dded5712d5..e8815a80080 100644
--- a/src/node_constants.cc
+++ b/src/node_constants.cc
@@ -38,6 +38,7 @@

 #if HAVE_OPENSSL
 #include <openssl/ec.h>
+#include <openssl/rsa.h>
 #include <openssl/ssl.h>
 #if !defined(RSA_PKCS1_PADDING)
 #define RSA_PKCS1_PADDING 1
@@ -57,6 +58,18 @@
 #if !defined(RSA_PKCS1_PSS_PADDING)
 #define RSA_PKCS1_PSS_PADDING 6
 #endif
+#ifndef RSA_PSS_SALTLEN_DIGEST
+#define RSA_PSS_SALTLEN_DIGEST -1
+#endif
+
+#ifndef RSA_PSS_SALTLEN_MAX_SIGN
+#define RSA_PSS_SALTLEN_MAX_SIGN -2
+#endif
+
+#ifndef RSA_PSS_SALTLEN_AUTO
+#define RSA_PSS_SALTLEN_AUTO -2
+#endif
+
 #if !defined(OPENSSL_IS_BORINGSSL) && OPENSSL_VERSION_MAJOR >= 3
 // OpenSSL hides these deprecated DH check constants under
 // OPENSSL_NO_DEPRECATED, but the numeric verifyError values remain public API.
diff --git a/src/node_constants.h b/src/node_constants.h
index 97429c0e5e9..7e02db84321 100644
--- a/src/node_constants.h
+++ b/src/node_constants.h
@@ -32,18 +32,6 @@

 #if HAVE_OPENSSL

-#ifndef RSA_PSS_SALTLEN_DIGEST
-#define RSA_PSS_SALTLEN_DIGEST -1
-#endif
-
-#ifndef RSA_PSS_SALTLEN_MAX_SIGN
-#define RSA_PSS_SALTLEN_MAX_SIGN -2
-#endif
-
-#ifndef RSA_PSS_SALTLEN_AUTO
-#define RSA_PSS_SALTLEN_AUTO -2
-#endif
-
 #if defined(NODE_OPENSSL_DEFAULT_CIPHER_LIST)
 #define DEFAULT_CIPHER_LIST_CORE NODE_OPENSSL_DEFAULT_CIPHER_LIST
 #else