A file is signed with the following parameters: CRYPT_ALGO_SHA256 and CRYPT_PKC_FORMAT_PSS. As expected, the generated CMS contains the DigestAlgorithm SHA256 and the SignatureAlgorithm rsaPSS (1 2 840 113549 1 1 10) in SignerInfo. However, the cmsAlgorithmProtection (1 2 840 113549 1 9 52) contains the SignatureAlgorithm rsaEncryption (1 2 840 113549 1 1 1). According to RFC6211, the SignatureAlgorithm must be a copy of SignerInfo, in this case rsaPSS.
Checking signatures with correct cmsAlgorithmProtection also fails.
A file is signed with the following parameters: CRYPT_ALGO_SHA256 and CRYPT_PKC_FORMAT_PSS. As expected, the generated CMS contains the DigestAlgorithm SHA256 and the SignatureAlgorithm rsaPSS (1 2 840 113549 1 1 10) in SignerInfo. However, the cmsAlgorithmProtection (1 2 840 113549 1 9 52) contains the SignatureAlgorithm rsaEncryption (1 2 840 113549 1 1 1). According to RFC6211, the SignatureAlgorithm must be a copy of SignerInfo, in this case rsaPSS.
Checking signatures with correct cmsAlgorithmProtection also fails.