mirror of
https://github.com/openssl/openssl.git
synced 2024-11-27 05:21:51 +08:00
ASN1: Make ASN1_item_verify_ctx() work with provider-native keys
Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12587)
This commit is contained in:
parent
5045abb2e9
commit
d55d0935de
@ -163,7 +163,7 @@ int ASN1_item_verify_ctx(const ASN1_ITEM *it, const X509_ALGOR *alg,
|
||||
}
|
||||
|
||||
/* Check public key OID matches public key type */
|
||||
if (EVP_PKEY_type(pknid) != pkey->ameth->pkey_id) {
|
||||
if (!EVP_PKEY_is_a(pkey, OBJ_nid2sn(pknid))) {
|
||||
ASN1err(0, ASN1_R_WRONG_PUBLIC_KEY_TYPE);
|
||||
goto err;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user