pkcs7_decrypt_rinfo
if (pkcs7_decrypt_rinfo(&ek, &eklen, ri, pkey,
if (pkcs7_decrypt_rinfo(&ek, &eklen, ri, pkey, 0) < 0)