Changeset 84239 in vbox for trunk/src/VBox/Runtime/common/crypto

Timestamp:

May 10, 2020 12:54:41 PM (5 years ago)

Author:

vboxsync

Message:

IPRT/pkcs7-sanity.cpp: Accept RTASN1TYPE_NOT_PRESENT in addition to RTASN1TYPE_NULL for digest algorithm parameters. OpenSSL cms_sign produces SignedData structures with them not-present. bugref:9699

File:

• trunk/src/VBox/Runtime/common/crypto/pkcs7-sanity.cpp (modified) (1 diff)

trunk/src/VBox/Runtime/common/crypto/pkcs7-sanity.cpp

@@ -72 +72 @@
                                      "%s: SignedData.DigestAlgorithms[%i] is not known: %s",
                                      pszErrorTag, i, pSignedData->DigestAlgorithms.papItems[i]->Algorithm.szObjId);
-            if (pSignedData->DigestAlgorithms.papItems[i]->Parameters.enmType != RTASN1TYPE_NULL)
+            if (   pSignedData->DigestAlgorithms.papItems[i]->Parameters.enmType != RTASN1TYPE_NULL
+                && pSignedData->DigestAlgorithms.papItems[i]->Parameters.enmType != RTASN1TYPE_NOT_PRESENT)
                 return RTErrInfoSetF(pErrInfo, VERR_CR_PKCS7_DIGEST_PARAMS_NOT_IMPL,
                                      "%s: SignedData.DigestAlgorithms[%i] has parameters: tag=%u",