aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/pkcs7
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2000-09-18 12:30:57 +0000
committerDr. Stephen Henson <steve@openssl.org>2000-09-18 12:30:57 +0000
commit730e37edb64e653bfbcc1b932e0651452b52c60c (patch)
tree33ab7f76f802e00ffd89e8c08d0683ece3b86983 /crypto/pkcs7
parent4b6e6ab91cf6132e1c31236c984369b951c72cc6 (diff)
downloadopenssl-730e37edb64e653bfbcc1b932e0651452b52c60c.tar.gz
Work around for Netscape PKCS#7 signedData bug.
Diffstat (limited to 'crypto/pkcs7')
-rw-r--r--crypto/pkcs7/pk7_smime.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/crypto/pkcs7/pk7_smime.c b/crypto/pkcs7/pk7_smime.c
index 2ececcd07e..d716f9faeb 100644
--- a/crypto/pkcs7/pk7_smime.c
+++ b/crypto/pkcs7/pk7_smime.c
@@ -172,12 +172,17 @@ int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store,
PKCS7err(PKCS7_F_PKCS7_VERIFY,PKCS7_R_NO_CONTENT);
return 0;
}
+#if 0
+ /* NB: this test commented out because some versions of Netscape
+ * illegally include zero length content when signing data.
+ */
/* Check for data and content: two sets of data */
if(!PKCS7_get_detached(p7) && indata) {
PKCS7err(PKCS7_F_PKCS7_VERIFY,PKCS7_R_CONTENT_AND_DATA_PRESENT);
return 0;
}
+#endif
sinfos = PKCS7_get_signer_info(p7);