diff options
| author | jsing <> | 2020-06-05 17:53:26 +0000 |
|---|---|---|
| committer | jsing <> | 2020-06-05 17:53:26 +0000 |
| commit | 81397cfe8d753bdd48b231533c4285712b53065f (patch) | |
| tree | 267abe3b33b9f515985883e0cd2107ab6a46c232 /src/lib/libssl/ssl_cert.c | |
| parent | 35a22aaa59dd2c20dc984d2317024ae0ea5c4939 (diff) | |
| download | openbsd-81397cfe8d753bdd48b231533c4285712b53065f.tar.gz openbsd-81397cfe8d753bdd48b231533c4285712b53065f.tar.bz2 openbsd-81397cfe8d753bdd48b231533c4285712b53065f.zip | |
Enable GOST_SIG_FORMAT_RS_LE when verifying certificate signatures.
GOST cipher suites requires that CertVerify signatures be generated in a
special way (see ssl3_send_client_kex_gost(), ssl3_get_cert_verify()).
However, the GOST_SIG_FORMAT_RS_LE flag was not passed in case of TLS 1.2
connections (because they use different code path). Set this flag on
GOST PKEYs.
Diff from Dmitry Baryshkov <dbaryshkov@gmail.com>
Sponsored by ROSA Linux
ok inoguchi@ tb@
Diffstat (limited to 'src/lib/libssl/ssl_cert.c')
0 files changed, 0 insertions, 0 deletions