apps: silent warning when loading CSR files with vfyopt option
authorTianjia Zhang <tianjia.zhang@linux.alibaba.com>
Fri, 21 Apr 2023 03:06:21 +0000 (11:06 +0800)
committerTomas Mraz <tomas@openssl.org>
Wed, 3 May 2023 07:48:17 +0000 (09:48 +0200)
commita75f707fcaaed5c9b26e0ddfc0e0529957a11a1d
tree1fd68e3591800af1a7ee2038886ea38c8770fdac
parenta8eb81ccd2d3daeb92c0842a02dc688eae298250
apps: silent warning when loading CSR files with vfyopt option

When verifying or signing a CSR file with the -vfyopt option,
a warning message similar to the following will appear:

  Warning: CSR self-signature does not match the contents

This happens especially when the SM2 algorithm is used and the
distid parameter is added. Pass the vfyopts parameter to the
do_X509_REQ_verify() function to eliminate the warning message.

Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20799)
apps/ca.c
apps/cmp.c
apps/include/apps.h
apps/lib/apps.c
apps/req.c
apps/x509.c