Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-02-13 19:41:49 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add 2 additional OIDs to the list of acceptable digestEncryptionAlgIDs,

Browse Source 
per RFC 3370. r=thayes.  Bug 230761.
This commit is contained in:
nelsonb%netscape.com 2004-01-14 22:20:44 +00:00
parent 49152980bd
commit 65088fd320
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
security/nss/lib/smime/cmssiginfo.c
View File

@ -34,7 +34,7 @@
/*
* CMS signerInfo methods.
*
* $Id: cmssiginfo.c,v 1.24 2004/01/07 23:07:23 jpierre%netscape.com Exp $
* $Id: cmssiginfo.c,v 1.25 2004/01/14 22:20:44 nelsonb%netscape.com Exp $
*/
#include "cmslocal.h"
@ -344,6 +344,7 @@ NSS_CMSSignerInfo_Verify(NSSCMSSignerInfo *signerinfo,
CERTCertificate *cert;
NSSCMSVerificationStatus vs = NSSCMSVS_Unverified;
PLArenaPool *poolp;
SECOidTag tag;
if (signerinfo == NULL)
return SECFailure;
@ -370,10 +371,13 @@ NSS_CMSSignerInfo_Verify(NSSCMSSignerInfo *signerinfo,
* and we would Just Work. So this check should just be removed,
* but not until the VFY code is better at setting errors.
*/
switch (SECOID_GetAlgorithmTag(&(signerinfo->digestEncAlg))) {
tag = SECOID_GetAlgorithmTag(&(signerinfo->digestEncAlg));
switch (tag) {
case SEC_OID_PKCS1_RSA_ENCRYPTION:
case SEC_OID_ANSIX9_DSA_SIGNATURE:
case SEC_OID_ANSIX9_DSA_SIGNATURE_WITH_SHA1_DIGEST:
case SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION:
case SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION:
/* ok */
break;
case SEC_OID_UNKNOWN: