Per RFC 7292, safeContentsBag is a SEQUENCE OF, not a SET OF

OpenSSL b709babb by Richard Levitte

ok jsing

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libcrypto/pkcs12/p12_asn.c b/src/lib/libcrypto/pkcs12/p12_asn.c
index d152063e37..5103e093ee 100644
--- a/src/lib/libcrypto/pkcs12/p12_asn.c
+++ b/src/lib/libcrypto/pkcs12/p12_asn.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: p12_asn.c,v 1.10 2022/01/14 08:16:13 tb Exp $ */
+/* $OpenBSD: p12_asn.c,v 1.11 2022/07/24 18:48:04 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999.
  */
@@ -323,7 +323,7 @@ static const ASN1_ADB_TABLE PKCS12_SAFEBAG_adbtbl[] = {
         {
                 .value = NID_safeContentsBag,
                 .tt = {
-                        .flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SET_OF,
+                        .flags = ASN1_TFLG_EXPLICIT | ASN1_TFLG_SEQUENCE_OF,
                         .tag = 0,
                         .offset = offsetof(PKCS12_SAFEBAG, value.safes),
                         .field_name = "value.safes",