[openssl/openssl] 02d0f6: CMS/PKCS7: use EVP_CIPHER_fetch() for SMIMECapabil...
"'Todd Short' via openssl-commits" <[email protected]> Mon, 03 Aug 2026 00:07:37 -0700
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 02d0f65c9f8579cd1625a8d084ee8479093beb1b
https://github.com/openssl/openssl/commit/02d0f65c9f8579cd1625a8d084ee8479093beb1b
Author: Todd Short <[email protected]>
Date: 2026-08-03 (Mon, 03 Aug 2026)
Changed paths:
M CHANGES.md
M crypto/cms/cms_sd.c
M crypto/pkcs7/pk7_smime.c
M doc/build.info
M doc/man3/CMS_add1_signer.pod
A doc/man3/CMS_add_standard_smimecap_ex.pod
M include/openssl/cms.h.in
M test/cmsapitest.c
M test/pkcs7_test.c
M test/recipes/80-test_cms.t
M util/libcrypto.num
M util/missingcrypto.txt
Log Message:
-----------
CMS/PKCS7: use EVP_CIPHER_fetch() for SMIMECapabilities
Fixes #25919
Replace EVP_get_cipherbynid()/EVP_get_digestbynid() with
EVP_CIPHER_fetch()/EVP_MD_fetch() when building SMIMECapabilities
attributes, so that only algorithms available in the active providers
are advertised. This prevents RC2, DES, and GOST from appearing by
default when only the default provider is loaded.
Add CMS_add_standard_smimecap_ex() as a provider-aware replacement
for the newly-deprecated CMS_add_standard_smimecap().
Adds missing documention and new unit-tests validating the new behavior.
Signed-off-by: Todd Short <[email protected]>
Reviewed-by: Dmitry Belyavskiy <[email protected]>
Reviewed-by: Jakub Zelenka <[email protected]>
MergeDate: Mon Aug 3 07:06:44 2026
(Merged from https://github.com/openssl/openssl/pull/31990)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/3693c3-02d0f6%40github.com.