openbsd/src/lib/libssl/ssl_sigalgs.h, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2019-03-25T17:33:26+00:00 Strip out all of the pkey to sigalg and sigalg to pkey linkages. 2019-03-25T17:33:26+00:00 jsing 2019-03-25T17:33:26+00:00 urn:sha1:97b045dbcc34049cb190d3b235aaed0155c5e995 These are no longer used now that we defer signature algorithm selection. ok beck@ Defer sigalgs selection until the certificate is known. 2019-03-25T17:21:18+00:00 jsing 2019-03-25T17:21:18+00:00 urn:sha1:c46928243f6c8aa22e46219e22df33de006a501f Previously the signature algorithm was selected when the TLS extension was parsed (or the client received a certificate request), however the actual certificate to be used is not known at this stage. This leads to various problems, including the selection of a signature algorithm that cannot be used with the certificate key size (as found by jeremy@ via ruby regress). Instead, store the signature algorithms list and only select a signature algorithm when we're ready to do signature generation. Joint work with beck@. Correct ECDSA_SECP512R1 typo to ECDSA_SECP521R1 2019-01-23T23:47:13+00:00 beck 2019-01-23T23:47:13+00:00 urn:sha1:0a4b909395f2a5effee0b6326c75021b6d4a9968 spotted by naddy@ Modify sigalgs extension processing to accomodate TLS 1.3. 2019-01-23T18:39:28+00:00 beck 2019-01-23T18:39:28+00:00 urn:sha1:5b044ab96482aee07d5182930013d4e606d4740d - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2. - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 from a 1.3 handshake. ok jsing@ tb@ revert previous, accidentally contained another diff in addition 2019-01-23T18:24:40+00:00 beck 2019-01-23T18:24:40+00:00 urn:sha1:9a6a5e403c8b66eb5bbc3532a5f1b5e325b172c1 to the one I intended to commit Modify sigalgs extension processing for TLS 1.3. 2019-01-23T16:46:04+00:00 beck 2019-01-23T16:46:04+00:00 urn:sha1:eb8cfbe6972b8b99de20acf4ed8e9b7ffc9b22df - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2 - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 ok jsing@ tb@ Unbreak legacy ciphers for prior to 1.1 by setting having a legacy 2018-11-16T02:41:16+00:00 beck 2018-11-16T02:41:16+00:00 urn:sha1:69bf77d3b518cd8ed78eef6ac0fe903148c8fa95 sigalg for MD5_SHA1 and using it as the non sigalgs default ok jsing@ Add check function to verify that pkey is usable with a sigalg. 2018-11-11T21:54:47+00:00 beck 2018-11-11T21:54:47+00:00 urn:sha1:c211b60ba408365c17d7fbd5fe3855d2a30de266 Include check for appropriate RSA key size when used with PSS. ok tb@ Remove dead code 2018-11-10T08:42:39+00:00 beck 2018-11-10T08:42:39+00:00 urn:sha1:53421fd94339bb9af842ae49a732315507d719b2 ok jsing@ Stop keeping track of sigalgs by guessing it from digest and pkey, 2018-11-10T01:19:09+00:00 beck 2018-11-10T01:19:09+00:00 urn:sha1:a63c042c294065378076f342043234c8efa620b2 just keep the sigalg around so we can remember what we actually decided to use. ok jsing@