Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF

OpenSSL b709babb by Richard Levitte

ok jsing

diff --git a/lib/libcrypto/pkcs12/p12_asn.c b/lib/libcrypto/pkcs12/p12_asn.c
index d152063..5103e09 100644 (file)
--- a/lib/libcrypto/pkcs12/p12_asn.c
+++ b/lib/libcrypto/pkcs12/p12_asn.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: p12_asn.c,v 1.10 2022/01/14 08:16:13 tb Exp $ */
+/* $OpenBSD: p12_asn.c,v 1.11 2022/07/24 18:48:04 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999.
  */
@@ -323,7 +323,7 @@ static const ASN1_ADB_TABLE PKCS12_SAFEBAG_adbtbl[] = {
        {
                .value = NID_safeContentsBag,
                .tt = {
-                       .flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SET_OF,
+                       .flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SEQUENCE_OF,
                        .tag = 0,
                        .offset = offsetof(PKCS12_SAFEBAG, value.safes),
                        .field_name = "value.safes",