check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Tue, 26 Jan 2021 10:53:15 +0000 (11:53 +0100)
committerDr. David von Oheimb <dev@ddvo.net>
Thu, 28 Jan 2021 14:05:04 +0000 (15:05 +0100)
commit199df4a93f74617612abd9419ad6cf00d9c34bc3
tree2bb3d4fda10f4c614a3b81bb099ba19c660d5a25
parent03f5c8930c0c04ab0c9b7d243b893db234e494b2
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS

This is an upstream fix for #13931

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13968)
crypto/x509/v3_purp.c
test/certs/ca-pss-cert.pem [new file with mode: 0644]
test/certs/ca-pss-key.pem [new file with mode: 0644]
test/certs/ee-pss-cert.pem [new file with mode: 0644]
test/certs/ee-pss-wrong1.5-cert.pem [new file with mode: 0644]
test/certs/mkcert.sh
test/certs/setup.sh
test/recipes/25-test_verify.t