Skip to content

Commit 5ffc332

Browse files
committed
Fix pkeyutl -verifyrecover
When performing a pkeyutl -verifyrecover operation the input file is not a hash - it is the signature itself. Therefore don't do the check to make sure it looks like a hash. Fixes openssl#9658 Reviewed-by: Richard Levitte <[email protected]> (Merged from openssl#9731)
1 parent 280cc01 commit 5ffc332

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

apps/pkeyutl.c

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -398,8 +398,7 @@ int pkeyutl_main(int argc, char **argv)
398398
if (!rawin
399399
&& buf_inlen > EVP_MAX_MD_SIZE
400400
&& (pkey_op == EVP_PKEY_OP_SIGN
401-
|| pkey_op == EVP_PKEY_OP_VERIFY
402-
|| pkey_op == EVP_PKEY_OP_VERIFYRECOVER)) {
401+
|| pkey_op == EVP_PKEY_OP_VERIFY)) {
403402
BIO_printf(bio_err,
404403
"Error: The input data looks too long to be a hash\n");
405404
goto end;

0 commit comments

Comments
 (0)