Set Enveloped data version to 2 if ktri version not zero.

(cherry picked from commit 9c5d953a07f472452ae2cb578e39eddea2de2b9c)

diff --git a/crypto/cms/cms_env.c b/crypto/cms/cms_env.c
index b8685fa17590a8d92862ddf10188b3a8a7ad4ccc..f53336b5fffdc486aea4d652be314ca2c2a3880b 100644 (file)
--- a/crypto/cms/cms_env.c
+++ b/crypto/cms/cms_env.c
@@ -185,6 +185,8 @@ CMS_RecipientInfo *CMS_add1_recipient_cert(CMS_ContentInfo *cms,
        if (flags & CMS_USE_KEYID)
                {
                ktri->version = 2;
+               if (env->version < 2)
+                       env->version = 2;
                type = CMS_RECIPINFO_KEYIDENTIFIER;
                }
        else