[rs-commit] r371 - in /mod_scep/trunk: ChangeLog mod_scep.c

[rs-commit at redwax.eu]

Author: minfrin at redwax.eu
Date: Tue May  5 11:44:02 2020
New Revision: 371

Log:
If there is no messageData to be transmitted, the entire
pkcsPKIEnvelope MUST be omitted.

Modified:
    mod_scep/trunk/ChangeLog
    mod_scep/trunk/mod_scep.c

Modified: mod_scep/trunk/ChangeLog
==============================================================================
--- mod_scep/trunk/ChangeLog	(original)
+++ mod_scep/trunk/ChangeLog	Tue May  5 11:44:02 2020
@@ -1,5 +1,8 @@
 
 Changes with v0.2.4
+
+ *) If there is no messageData to be transmitted, the entire
+    pkcsPKIEnvelope MUST be omitted. [Graham Leggett]
 
  *) Encrypt responses with AES instead of DES3. [Graham Leggett]
 

Modified: mod_scep/trunk/mod_scep.c
==============================================================================
--- mod_scep/trunk/mod_scep.c	(original)
+++ mod_scep/trunk/mod_scep.c	Tue May  5 11:44:02 2020
@@ -1686,6 +1686,13 @@
     PKCS7 *p7e = NULL;
     STACK_OF(X509) *certs;
     BIO *ebio = NULL;
+
+    /* If there is no messageData to be transmitted, the entire
+     * pkcsPKIEnvelope MUST be omitted.
+     */
+    if (!inbio) {
+        return scep_send_signed_response(r, NULL, rscep);
+    }
 
     /* perform encryption */
     if (!(certs = sk_X509_new(NULL))) {