Commit 72e7e90c12 for openssl.org

commit 72e7e90c1271292599512231432c2e7a42a2dd69
Author: Dr. David von Oheimb <dev@ddvo.net>
Date:   Sat Jul 30 21:11:51 2022 +0200

    CMS/PKCS#7: Add missing verification method "smime_encrypt" in crypto/x509/x509_vpm.c and doc

    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
    MergeDate: Fri Mar 27 06:25:19 2026
    (Merged from https://github.com/openssl/openssl/pull/18914)

diff --git a/crypto/x509/x509_vpm.c b/crypto/x509/x509_vpm.c
index d05f34c00d..410e690e83 100644
--- a/crypto/x509/x509_vpm.c
+++ b/crypto/x509/x509_vpm.c
@@ -935,7 +935,14 @@ static const X509_VERIFY_PARAM default_table[] = {
         .auth_level = -1,
     },
     {
-        .name = "smime_sign", /* S/MIME sign parameters */
+        .name = "smime_encrypt", /* S/MIME encryption parameters */
+        .purpose = X509_PURPOSE_SMIME_ENCRYPT,
+        .trust = X509_TRUST_EMAIL,
+        .depth = -1,
+        .auth_level = -1,
+    },
+    {
+        .name = "smime_sign", /* S/MIME signature parameters */
         .purpose = X509_PURPOSE_SMIME_SIGN,
         .trust = X509_TRUST_EMAIL,
         .depth = -1,
diff --git a/doc/man1/openssl-verification-options.pod b/doc/man1/openssl-verification-options.pod
index 8e4edf0af1..7ad8c111cd 100644
--- a/doc/man1/openssl-verification-options.pod
+++ b/doc/man1/openssl-verification-options.pod
@@ -566,7 +566,7 @@ the subject certificate.

 Use a set of verification parameters, also known as verification method,
 identified by I<name>. The currently predefined methods are named C<ssl_client>,
-C<ssl_server>, C<smime_sign> with alias C<pkcs7>, C<code_sign>, and C<default>.
+C<ssl_server>, C<smime_sign> with alias C<pkcs7>, C<smime_encrypt>, C<code_sign>, and C<default>.
 These mimic the combinations of purpose and trust settings used in SSL/(D)TLS,
 CMS/PKCS7 (including S/MIME), and code signing.