From: Tobias Brunner Date: Wed, 8 Nov 2017 15:48:37 +0000 (+0100) Subject: Merge branch 'rsassa-pss' X-Git-Tag: 5.6.1rc1~6 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1c4b392a5b2badf05e86478da7370fef55b11329;p=thirdparty%2Fstrongswan.git Merge branch 'rsassa-pss' This adds support for RSASSA-PSS signatures in IKEv2 digital signature authentication (RFC 7427), certificates and CRLs etc., and when signing credentials via pki tool. For interoperability with older versions, the default is to use classic PKCS#1 signatures. To use PSS padding either enable rsa_pss via strongswan.conf or explicitly use it either via ike:rsa/pss... auth token or the --rsa-padding option of the pki tool. References #2427. --- 1c4b392a5b2badf05e86478da7370fef55b11329