[krbdev.mit.edu #9111] git commit

Mon Mar 18 21:20:14 2024: Request 9111 was acted upon.
 Transaction: Ticket created by [email protected]
       Queue: krb5
     Subject: git commit
       Owner: [email protected]
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9111 >



Correct PKINIT EC cert signature metadata

When generating CMS SignedData in PKINIT, check the certificate's
public key type and set the signatureAlgorithm field appropriately.
(This field is currently ignored by OpenSSL when verifying CMS
SignedData.)

https://github.com/krb5/krb5/commit/bdcd6075bd4593c8f67722ce075c9519faec58b7
Author: Greg Hudson <[email protected]>
Commit: bdcd6075bd4593c8f67722ce075c9519faec58b7
Branch: master
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)