X509_certificate_type() needs to know about RSA-PSS

This doesn't do much right now, but is part of the tangle that is adding
RSA-PSS support.

ok beck jsing

1 files changed, 4 insertions, 1 deletions

diff --git a/src/lib/libcrypto/x509/x509type.c b/src/lib/libcrypto/x509/x509type.c
index 5da808cd04..91e1fe8f32 100644
--- a/src/lib/libcrypto/x509/x509type.c
+++ b/src/lib/libcrypto/x509/x509type.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509type.c,v 1.19 2023/06/15 18:30:09 tb Exp $ */
+/* $OpenBSD: x509type.c,v 1.20 2023/11/13 15:36:55 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -83,6 +83,9 @@ X509_certificate_type(const X509 *x, const EVP_PKEY *pkey)
         case EVP_PKEY_RSA:
                 ret = EVP_PK_RSA|EVP_PKT_SIGN|EVP_PKT_ENC;
                 break;
+        case EVP_PKEY_RSA_PSS:
+                ret = EVP_PK_RSA|EVP_PKT_SIGN;
+                break;
         case EVP_PKEY_DSA:
                 ret = EVP_PK_DSA|EVP_PKT_SIGN;
                 break;