gcrypt: Enable RSA PKCS1 encryption/decryption

diff --git a/scripts/test.sh b/scripts/test.sh
index db992da0129ac43718936626889acc3b0ed1f868..cdb9ce764f9f9511cfcad07d859dda2de08b9558 100755 (executable)
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -116,8 +116,8 @@ openssl*)
        DEPS="libssl-dev"
        ;;
 gcrypt)
-       CONFIG="--disable-defaults --enable-pki --enable-gcrypt --enable-pkcs1"
-       export TESTS_PLUGINS="test-vectors pkcs1 gcrypt!"
+       CONFIG="--disable-defaults --enable-pki --enable-gcrypt --enable-pkcs1 --enable-pkcs8"
+       export TESTS_PLUGINS="test-vectors pkcs1 pkcs8 gcrypt!"
        if [ "$ID" = "ubuntu" -a "$VERSION_ID" = "20.04" ]; then
                DEPS="libgcrypt20-dev"
        else

diff --git a/src/libstrongswan/plugins/gcrypt/gcrypt_plugin.c b/src/libstrongswan/plugins/gcrypt/gcrypt_plugin.c
index f97c57b8f142ad0f87cb5c13ce9dcd0ae5548868..c37cd57e7f1eb35548714328401eb30c10544025 100644 (file)
--- a/src/libstrongswan/plugins/gcrypt/gcrypt_plugin.c
+++ b/src/libstrongswan/plugins/gcrypt/gcrypt_plugin.c
@@ -134,6 +134,7 @@ METHOD(plugin_t, get_features, int,
                PLUGIN_PROVIDE(PRIVKEY_SIGN, SIGN_RSA_EMSA_PKCS1_SHA2_512),
                PLUGIN_PROVIDE(PRIVKEY_SIGN, SIGN_RSA_EMSA_PKCS1_SHA1),
                PLUGIN_PROVIDE(PRIVKEY_SIGN, SIGN_RSA_EMSA_PKCS1_MD5),
+               PLUGIN_PROVIDE(PRIVKEY_DECRYPT, ENCRYPT_RSA_PKCS1),
                /* signature verification schemes */
 #if GCRYPT_VERSION_NUMBER >= 0x010700
                PLUGIN_PROVIDE(PUBKEY_VERIFY, SIGN_RSA_EMSA_PSS),
@@ -145,6 +146,7 @@ METHOD(plugin_t, get_features, int,
                PLUGIN_PROVIDE(PUBKEY_VERIFY, SIGN_RSA_EMSA_PKCS1_SHA2_512),
                PLUGIN_PROVIDE(PUBKEY_VERIFY, SIGN_RSA_EMSA_PKCS1_SHA1),
                PLUGIN_PROVIDE(PUBKEY_VERIFY, SIGN_RSA_EMSA_PKCS1_MD5),
+               PLUGIN_PROVIDE(PUBKEY_ENCRYPT, ENCRYPT_RSA_PKCS1),
                /* random numbers */
                PLUGIN_REGISTER(RNG, gcrypt_rng_create),
                        PLUGIN_PROVIDE(RNG, RNG_WEAK),