[krbdev.mit.edu #7889] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Mar 25 18:06:53 EDT 2014


Stop shadowing id-pkcs7-data OID

pkinit_crypto_openssl.c currently creates a shadow entry for
id-pkcs7-data so that OpenSSL will expect to see the corresponding
octet string in d.other instead than d.data.  This shadowing is very
unfriendly to other uses of OpenSSL and we should stop.  Eliminate the
shadowing and rewrite create_contentinfo so that it sets up the PKCS7
object correctly if the OID is id-pkcs7-data.

https://github.com/krb5/krb5/commit/8ee1790ba6e3468d7ed53ed46123dc9545a4216f
Author: Greg Hudson <ghudson at mit.edu>
Commit: 8ee1790ba6e3468d7ed53ed46123dc9545a4216f
Branch: master
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c |  116 ++++++++------------
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.h |    1 -
 2 files changed, 45 insertions(+), 72 deletions(-)



More information about the krb5-bugs mailing list