cmp.c: add protection context with srvcert for kem.

siemens · Aug 8, 2023 · ef46ddb · ef46ddb
1 parent 63fdfa7
commit ef46ddb
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/apps/cmp.c b/apps/cmp.c
@@ -1398,7 +1398,8 @@ static SSL_CTX *setup_ssl_ctx(OSSL_CMP_CTX *ctx, const char *host,
  */
 static int setup_protection_ctx(OSSL_CMP_CTX *ctx, ENGINE *engine)
 {
-    if (!opt_unprotected_requests && opt_secret == NULL && opt_key == NULL) {
+    if (!opt_unprotected_requests && opt_secret == NULL && opt_key == NULL
+        && opt_srvcert == NULL) {
         CMP_err("must give -key or -secret unless -unprotected_requests is used");
         return 0;
     }
@@ -1408,7 +1409,8 @@ static int setup_protection_ctx(OSSL_CMP_CTX *ctx, ENGINE *engine)
         CMP_err("must give -ref if no -cert and no -subject given");
         return 0;
     }
-    if (!opt_secret && ((opt_cert == NULL) != (opt_key == NULL))) {
+    if (!opt_secret && ((opt_cert == NULL) != (opt_key == NULL))
+        && opt_srvcert == NULL) {
         CMP_err("must give both -cert and -key options or neither");
         return 0;
     }