dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.
authorWerner Koch <wk@gnupg.org>
Tue, 28 May 2019 10:27:00 +0000 (12:27 +0200)
committerDaniel Kahn Gillmor <dkg@fifthhorseman.net>
Thu, 22 Aug 2019 19:11:59 +0000 (20:11 +0100)
commit2cbd67127eda114d797441495b9a50d8fbdd10f8
treed77c158487ddf8fcc123163ef6d63e827d93b047
parent7b47d9fc9c7669fe7bb4d01fb5262ebdc02562a1
dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.

* dirmngr/ocsp.c (do_ocsp_request): Remove arg md.  Add args r_sigval,
r_produced_at, and r_md.  Get the hash algo from the signature and
create the context here.
(check_signature): Allow any hash algo.  Print a diagnostic if the
signature does not verify.
--

GnuPG-bug-id: 3966
Signed-off-by: Werner Koch <wk@gnupg.org>
(cherry picked from commit 5281ecbe3ae8364407d9831243b81d664b040805)

Gbp-Pq: Topic from-2.2.16
Gbp-Pq: Name dirmngr-Allow-for-other-hash-algorithms-than-SHA-1-in-OCS.patch
dirmngr/ocsp.c