Affected version: 1.0.2f
crypto/cms/cms_kari.c calls EVP_des_ede3_wrap without checking whether
OPENSSL_NO_DES is defined, and EVP_aes_XXX_wrap without checking if
OPENSSL_NO_AES is defined. See the attached patch for the fix
--
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4316
Pl
A simple typo in des_ede_init_key. See the attached patch
diff -r -u crypto/evp/e_des3.c crypto/evp/e_des3.c
--- crypto/evp/e_des3.c 2015-03-19 14:30:36.0 +0100
+++ crypto/evp/e_des3.c 2015-05-07 16:05:04.0 +0200
@@ -289,7 +289,7 @@
# endif
# ifdef EVP_CHECK_DES_KEY
if (DES_