From: tb <tb@openbsd.org>
Date: Sun, 24 Jul 2022 18:48:04 +0000 (+0000)
Subject: Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=93036e3aca742a8c47512309ed0c00fa57efad91;p=openbsd

Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF

OpenSSL b709babb by Richard Levitte

ok jsing
---

diff --git a/lib/libcrypto/pkcs12/p12_asn.c b/lib/libcrypto/pkcs12/p12_asn.c
index d152063e376..5103e093eeb 100644
--- a/lib/libcrypto/pkcs12/p12_asn.c
+++ b/lib/libcrypto/pkcs12/p12_asn.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: p12_asn.c,v 1.10 2022/01/14 08:16:13 tb Exp $ */
+/* $OpenBSD: p12_asn.c,v 1.11 2022/07/24 18:48:04 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999.
  */
@@ -323,7 +323,7 @@ static const ASN1_ADB_TABLE PKCS12_SAFEBAG_adbtbl[] = {
 	{
 		.value = NID_safeContentsBag,
 		.tt = {
-			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SET_OF,
+			.flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SEQUENCE_OF,
 			.tag = 0,
 			.offset = offsetof(PKCS12_SAFEBAG, value.safes),
 			.field_name = "value.safes",