Use keyspec for DSA too.
authorDr. Stephen Henson <steve@openssl.org>
Sun, 1 Jun 2008 23:28:17 +0000 (23:28 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Sun, 1 Jun 2008 23:28:17 +0000 (23:28 +0000)
engines/e_capi.c

index c6821ebc6a31c44cbe8fc45c3513b02b371777a5..f14a71341e42ee19499c96c54f6d0e4f66e3bfd5 100644 (file)
@@ -855,7 +855,7 @@ static DSA_SIG *capi_dsa_do_sign(const unsigned char *digest, int dlen,
 
        /* Finally sign it */
        slen = sizeof(csigbuf);
-       if(!CryptSignHash(hash, AT_SIGNATURE, NULL, 0, csigbuf, &slen))
+       if(!CryptSignHash(hash, capi_key->keyspec, NULL, 0, csigbuf, &slen))
                {
                CAPIerr(CAPI_F_CAPI_DSA_DO_SIGN, CAPI_R_ERROR_SIGNING_HASH);
                capi_addlasterror();