Commit d597208c authored by Richard Levitte's avatar Richard Levitte
Browse files

ts_RESP_sign: Don't try to use v2 signing when ESS digest isn't set 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5653)
parent 311276ff

crypto/ts/ts_rsp_sign.c

+2 −1
Original line number Diff line number Diff line
@@ -678,7 +678,8 @@ static int ts_RESP_sign(TS_RESP_CTX *ctx) 
    }



    certs = ctx->flags & TS_ESS_CERT_ID_CHAIN ? ctx->certs : NULL;

    if (ctx->ess_cert_id_digest == EVP_sha1()) {

    if (ctx->ess_cert_id_digest == NULL

        || ctx->ess_cert_id_digest == EVP_sha1()) {

        if ((sc = ess_SIGNING_CERT_new_init(ctx->signer_cert, certs)) == NULL)

            goto err;