Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: f6fdbe63c7c51bd7c2c37567781d166e475ab5b1 https://github.com/openssl/openssl/commit/f6fdbe63c7c51bd7c2c37567781d166e475ab5b1 Author: Dr. David von Oheimb <david.von.ohe...@siemens.com> Date: 2022-12-08 (Thu, 08 Dec 2022)
Changed paths: M crypto/cmp/cmp_err.c M crypto/cmp/cmp_vfy.c M crypto/err/openssl.txt M doc/man3/OSSL_CMP_validate_msg.pod M include/openssl/cmperr.h M test/cmp_vfy_test.c Log Message: ----------- OSSL_CMP_validate_msg(): make sure to reject protection type mismatch Do not accept password-based if expected signature-based and no secret is available and do not accept signature-based if expected password-based and no trust anchors available. Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Paul Dale <pa...@openssl.org> Reviewed-by: David von Oheimb <david.von.ohe...@siemens.com> (Merged from https://github.com/openssl/openssl/pull/19729) (cherry picked from commit fc93335760686ad7cf3633d457caf18b0ac83ea2)