tree b4075671557d374e662f20232d4026051e75f081
parent 8803c0589dbb565fed74c70a556212f1eb16d132
author David Benjamin <davidben@google.com> 1529727272 -0400
committer Adam Langley <agl@google.com> 1529997891 +0000

Allow empty return values from PKCS7_get_*.

Right now we're inconsistent about it. If the OPTIONAL container is
missing, we report an error, but if the container is empty, we happily
return nothing. The latter behavior is more convenient for emulating
OpenSSL's PKCS#7 functions.

These are our own functions, so we have some leeway here. Looking
through callers, they appear to handle this fine.

Update-Note: This is a behavior change.
Change-Id: I1321025a64df3054d380003c90e57d9eb95e610f
Reviewed-on: https://boringssl-review.googlesource.com/29364
Reviewed-by: Adam Langley <agl@google.com>