]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Enable signing via provider for management-external-key
authorSelva Nair <selva.nair@gmail.com>
Tue, 14 Dec 2021 16:59:17 +0000 (11:59 -0500)
committerGert Doering <gert@greenie.muc.de>
Thu, 20 Jan 2022 14:54:11 +0000 (15:54 +0100)
commit199df03bf57339661a853cb764ea41a0c8349b95
treed58908777918251fc05fb64a0993d1da70d07d04
parent57abdcfc3885b3c127bb3d07e9c8ccdbffcf2548
Enable signing via provider for management-external-key

- Add a function to set as sign_op during key import. The
  function passes the signature request to management interface,
  and returns the result to the provider.

v2 changes: Method to do digest added to match the changes in
            the provider signature callback.
TODO:
 - Allow passing the undigested message to management interface
 - Add pkcs1 DigestInfo header when required

Signed-off-by: Selva Nair <selva.nair@gmail.com>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <20211214165928.30676-8-selva.nair@gmail.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg23428.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c
src/openvpn/xkey_common.h
src/openvpn/xkey_helper.c