Subject: git commit X-RT-Interface: API X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Transfer-Encoding: binary Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 From: ghudson@mit.edu Content-Disposition: inline X-RT-Original-Encoding: ascii RT-Message-ID: Content-Length: 913 Update error checking for OpenSSL CMS_verify The code for CMS data verification was initially written for OpenSSL's PKCS7_verify() function. It now uses CMS_verify(), but error handling is still done using PKCS7_verify() error identifiers. Update the recognized error codes so that the KDC generates KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED errors when appropriate. Use ERR_peek_last_error() to observe the error generated closest to the API surface. [ghudson@mit.edu: edited commit message] (cherry picked from commit 70f61d417261ca17efe3d60d180033bea2da60b0) https://github.com/krb5/krb5/commit/9a2051998c9446f56ba40a29e56c625b83e38467 Author: Julien Rische Committer: Greg Hudson Commit: 9a2051998c9446f56ba40a29e56c625b83e38467 Branch: krb5-1.20 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-)