]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Remove some more CMS key downgrades
authorMatt Caswell <matt@openssl.org>
Tue, 6 Oct 2020 16:02:45 +0000 (17:02 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 15 Oct 2020 09:00:28 +0000 (10:00 +0100)
Fixes #12983

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/13088)

apps/cms.c

index 91d951980dd178538b3721d6d669017855bf6e65..37b1e96a145ce071f608058185d79759048ac9c7 100644 (file)
@@ -862,13 +862,6 @@ int cms_main(int argc, char **argv)
         key = load_key(keyfile, keyform, 0, passin, e, "signing key");
         if (key == NULL)
             goto end;
-
-        /*
-         * TODO: Remove this when CMS has full support for provider-native
-         * EVP_PKEYs
-         */
-        if (EVP_PKEY_get0(key) == NULL)
-            goto end;
     }
 
     in = bio_open_default(infile, 'r', informat);
@@ -1067,13 +1060,6 @@ int cms_main(int argc, char **argv)
                 goto end;
             }
 
-            /*
-             * TODO: Remove this when CMS has full support for provider-native
-             * EVP_PKEYs
-             */
-            if (EVP_PKEY_get0(key) == NULL)
-                goto end;
-
             for (kparam = key_first; kparam; kparam = kparam->next) {
                 if (kparam->idx == i) {
                     tflags |= CMS_KEY_PARAM;