Branch: refs/heads/openssl-3.0
Home: https://github.com/openssl/openssl
Commit: f6fdbe63c7c51bd7c2c37567781d166e475ab5b1
https://github.com/openssl/openssl/commit/f6fdbe63c7c51bd7c2c37567781d166e475ab5b1
Author: Dr. David von Oheimb <david.von.ohe...@siemens.com>
Date: 2022-12-08 (Thu, 08 Dec 2022)
Changed paths:
M crypto/cmp/cmp_err.c
M crypto/cmp/cmp_vfy.c
M crypto/err/openssl.txt
M doc/man3/OSSL_CMP_validate_msg.pod
M include/openssl/cmperr.h
M test/cmp_vfy_test.c
Log Message:
-----------
OSSL_CMP_validate_msg(): make sure to reject protection type mismatch
Do not accept password-based if expected signature-based and no secret is
available and
do not accept signature-based if expected password-based and no trust anchors
available.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <pa...@openssl.org>
Reviewed-by: David von Oheimb <david.von.ohe...@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/19729)
(cherry picked from commit fc93335760686ad7cf3633d457caf18b0ac83ea2)
