Dr. Stephen Henson c3cd9be01f Return an error if no recipient type matches. ...

If the key type does not match any CMS recipient type return
an error instead of using a random key (MMA mitigation). This
does not leak any useful information to an attacker.

PR#3348
(cherry picked from commit 83a3182e0560f76548f4378325393461f6275493)

2014-05-09 14:24:49 +01:00

..

.cvsignore

.cvignore file for cms

2008-03-13 00:50:02 +00:00

cms_asn1.c

Fix CVE-2010-1633 and CVE-2010-0742.

2010-06-01 13:17:06 +00:00

cms_att.c

And so it begins...

2008-03-12 21:14:28 +00:00

cms_cd.c

Don't include comp.h in cmd_cd.c if OPENSSL_NO_COMP set

2013-01-23 01:14:13 +00:00

cms_dd.c

Remove unnecessary header.

2008-03-29 21:08:37 +00:00

cms_enc.c

Fix warning.

2012-10-04 15:04:26 +00:00

cms_env.c

Set Enveloped data version to 2 if ktri version not zero.

2014-05-06 14:04:37 +01:00

cms_err.c

Fix typo and add header files to err library.

2008-04-06 15:53:29 +00:00

cms_ess.c

Submitted by: Julia Lawall <julia@diku.dk>

2009-09-13 11:27:27 +00:00

cms_io.c

Use correct headers for signed receipts. Use consistent naming.

2008-03-31 15:03:55 +00:00

cms_lcl.h

Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and

2012-03-12 14:22:59 +00:00

cms_lib.c

Remove duplicate statement.

2014-02-15 01:29:49 +00:00

cms_sd.c

PR: 2058

2009-09-30 23:50:10 +00:00

cms_smime.c

Return an error if no recipient type matches.

2014-05-09 14:24:49 +01:00

cms.h

Fix for CMS/PKCS7 MMA. If RSA decryption fails use a random key and

2012-03-12 14:22:59 +00:00

Makefile

Update dependencies.

2008-03-29 21:11:25 +00:00