From 5ffc33244cd4d66e47dfa66ce89cb38d0f3074cc Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Thu, 29 Aug 2019 17:15:16 +0100 Subject: [PATCH] Fix pkeyutl -verifyrecover When performing a pkeyutl -verifyrecover operation the input file is not a hash - it is the signature itself. Therefore don't do the check to make sure it looks like a hash. Fixes #9658 Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9731) --- apps/pkeyutl.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/apps/pkeyutl.c b/apps/pkeyutl.c index c8cac0d676..6b012211e4 100644 --- a/apps/pkeyutl.c +++ b/apps/pkeyutl.c @@ -398,8 +398,7 @@ int pkeyutl_main(int argc, char **argv) if (!rawin && buf_inlen > EVP_MAX_MD_SIZE && (pkey_op == EVP_PKEY_OP_SIGN - || pkey_op == EVP_PKEY_OP_VERIFY - || pkey_op == EVP_PKEY_OP_VERIFYRECOVER)) { + || pkey_op == EVP_PKEY_OP_VERIFY)) { BIO_printf(bio_err, "Error: The input data looks too long to be a hash\n"); goto end;