openssl: Update PKCS#7 API to OpenSSL 1.1.0

diff --git a/src/libstrongswan/plugins/openssl/openssl_pkcs7.c b/src/libstrongswan/plugins/openssl/openssl_pkcs7.c
index 891e829ae8278a3c9aff18334d75c8a3e8a59a16..f10987c8d037b63f62d7b30ea47b647bf3ad940d 100644 (file)
--- a/src/libstrongswan/plugins/openssl/openssl_pkcs7.c
+++ b/src/libstrongswan/plugins/openssl/openssl_pkcs7.c
@@ -29,6 +29,10 @@
 
 #include <openssl/cms.h>
 
+#if OPENSSL_VERSION_NUMBER < 0x10100000L
+#define X509_ATTRIBUTE_get0_object(attr) ({ (attr)->object; })
+#endif
+
 typedef struct private_openssl_pkcs7_t private_openssl_pkcs7_t;
 
 /**
@@ -432,11 +436,11 @@ METHOD(pkcs7_t, get_attribute, bool,
        for (i = 0; i < CMS_signed_get_attr_count(si); i++)
        {
                attr = CMS_signed_get_attr(si, i);
-               if (!attr->single && sk_ASN1_TYPE_num(attr->value.set) == 1 &&
-                       openssl_asn1_known_oid(attr->object) == oid)
+               if (X509_ATTRIBUTE_count(attr) == 1 &&
+                       openssl_asn1_known_oid(X509_ATTRIBUTE_get0_object(attr)) == oid)
                {
                        /* get first value in SET */
-                       type = sk_ASN1_TYPE_value(attr->value.set, 0);
+                       type = X509_ATTRIBUTE_get0_type(attr, 0);
                        chunk = wrapped = openssl_i2chunk(ASN1_TYPE, type);
                        if (asn1_unwrap(&chunk, &chunk) != 0x100 /* ASN1_INVALID */)
                        {