]> git.ipfire.org Git - thirdparty/strongswan.git/commit
libstrongswan: Encode RSA-PSS algorithmIdentifier variant
authorAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 6 Sep 2022 19:10:36 +0000 (21:10 +0200)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 6 Sep 2022 19:15:43 +0000 (21:15 +0200)
commit747e840912ad3fff51d042df11343e19dc4e84a0
treee80c84755f2f4cfa9f4466d120d4539889083176
parentbf3f678551df9c0d61173750bc831f157404e907
libstrongswan: Encode RSA-PSS algorithmIdentifier variant

Some third party IKEv2 products expect an RSA-PSS ASN.1
algorithmIdentifier with an explicit trailerField value (CONTEXT3)
instead of the DEFAULT value if the trailerField is missing.

The setting charon.rsa_pss_trailerfield = yes enables the explicit
encoding.
conf/options/charon.opt
src/libstrongswan/credentials/keys/signature_params.c