]> git.ipfire.org Git - thirdparty/krb5.git/commit
Correct PKINIT EC cert signature metadata
authorGreg Hudson <ghudson@mit.edu>
Fri, 9 Feb 2024 22:57:40 +0000 (17:57 -0500)
committerGreg Hudson <ghudson@mit.edu>
Tue, 19 Mar 2024 01:05:39 +0000 (21:05 -0400)
commitbdcd6075bd4593c8f67722ce075c9519faec58b7
treed066b8381af7693311e36a166a80d88d16aaede3
parentf95dfb7908456f9563cee66706216a21df8d791f
Correct PKINIT EC cert signature metadata

When generating CMS SignedData in PKINIT, check the certificate's
public key type and set the signatureAlgorithm field appropriately.
(This field is currently ignored by OpenSSL when verifying CMS
SignedData.)

ticket: 9111 (new)
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c