[openssl/openssl] 02d0f6: CMS/PKCS7: use EVP_CIPHER_fetch() for SMIMECapabil...

"'Todd Short' via openssl-commits" <[email protected]> Mon, 03 Aug 2026 00:07:37 -0700
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 02d0f65c9f8579cd1625a8d084ee8479093beb1b
      https://github.com/openssl/openssl/commit/02d0f65c9f8579cd1625a8d084ee8479093beb1b
  Author: Todd Short <[email protected]>
  Date:   2026-08-03 (Mon, 03 Aug 2026)

  Changed paths:
    M CHANGES.md
    M crypto/cms/cms_sd.c
    M crypto/pkcs7/pk7_smime.c
    M doc/build.info
    M doc/man3/CMS_add1_signer.pod
    A doc/man3/CMS_add_standard_smimecap_ex.pod
    M include/openssl/cms.h.in
    M test/cmsapitest.c
    M test/pkcs7_test.c
    M test/recipes/80-test_cms.t
    M util/libcrypto.num
    M util/missingcrypto.txt

  Log Message:
  -----------
  CMS/PKCS7: use EVP_CIPHER_fetch() for SMIMECapabilities

Fixes #25919

Replace EVP_get_cipherbynid()/EVP_get_digestbynid() with
EVP_CIPHER_fetch()/EVP_MD_fetch() when building SMIMECapabilities
attributes, so that only algorithms available in the active providers
are advertised. This prevents RC2, DES, and GOST from appearing by
default when only the default provider is loaded.

Add CMS_add_standard_smimecap_ex() as a provider-aware replacement
for the newly-deprecated CMS_add_standard_smimecap().

Adds missing documention and new unit-tests validating the new behavior.

Signed-off-by: Todd Short <[email protected]>

Reviewed-by: Dmitry Belyavskiy <[email protected]>
Reviewed-by: Jakub Zelenka <[email protected]>
MergeDate: Mon Aug  3 07:06:44 2026
(Merged from https://github.com/openssl/openssl/pull/31990)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/3693c3-02d0f6%40github.com.