unprotected_exception
if (!ossl_cmp_msg_check_update(ctx, *rep, unprotected_exception,
req_verified = ossl_cmp_msg_check_update(ctx, req, unprotected_exception,