diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-05-27 17:52:53 +0200 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-06-13 15:13:21 +0200 |
| commit | 7aa70fd5e1281d86fbddcdfab03a474d0b6978af (patch) | |
| tree | 99ab6a502a8827fdfed1bb08208e07c853b6739f /crypto/cmp | |
| parent | 032b13c78447e29a22db70835725d8aae455a47b (diff) | |
Remove misleading diagnostics on pinned sender cert in OSSL_CMP_validate_msg()
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11998)
Diffstat (limited to 'crypto/cmp')
| -rw-r--r-- | crypto/cmp/cmp_vfy.c | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/crypto/cmp/cmp_vfy.c b/crypto/cmp/cmp_vfy.c index f73a0a06a5..323bd9c867 100644 --- a/crypto/cmp/cmp_vfy.c +++ b/crypto/cmp/cmp_vfy.c @@ -659,9 +659,6 @@ int OSSL_CMP_validate_msg(OSSL_CMP_CTX *ctx, const OSSL_CMP_MSG *msg) /* use ctx->srvCert for signature check even if not acceptable */ if (verify_signature(ctx, msg, scrt)) return 1; - /* call cert_acceptable() for adding diagnostic information */ - (void)cert_acceptable(ctx, "explicitly set", "sender cert", scrt, - NULL, NULL, msg); ossl_cmp_warn(ctx, "msg signature verification failed"); CMPerr(0, CMP_R_SRVCERT_DOES_NOT_VALIDATE_MSG); } |