sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-16 00:00:37 -04:00
Code Issues Projects Releases Wiki Activity

support of ECDSA signatures for all certificate types

Browse Source
This commit is contained in:
Andreas Steffen 2008-06-22 17:41:07 +00:00
parent 3af698fa4d
commit 0d12006def
4 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/libstrongswan/plugins/x509/x509_ac.c
View File

@ -796,6 +796,9 @@ static bool issued_by(private_x509_ac_t *this, certificate_t *issuer)
case OID_SHA512_WITH_RSA: case OID_SHA512_WITH_RSA:
scheme = SIGN_RSA_EMSA_PKCS1_SHA512; scheme = SIGN_RSA_EMSA_PKCS1_SHA512;
break; break;
case OID_ECDSA_WITH_SHA1:
scheme = SIGN_ECDSA_WITH_SHA1;
break;
default: default:
return FALSE; return FALSE;
} }

3
src/libstrongswan/plugins/x509/x509_crl.c
View File

@ -452,6 +452,9 @@ static bool issued_by(private_x509_crl_t *this, certificate_t *issuer)
case OID_SHA512_WITH_RSA: case OID_SHA512_WITH_RSA:
scheme = SIGN_RSA_EMSA_PKCS1_SHA512; scheme = SIGN_RSA_EMSA_PKCS1_SHA512;
break; break;
case OID_ECDSA_WITH_SHA1:
scheme = SIGN_ECDSA_WITH_SHA1;
break;
default: default:
return FALSE; return FALSE;
} }

4
src/libstrongswan/plugins/x509/x509_ocsp_request.c
View File

@ -267,6 +267,10 @@ static chunk_t build_optionalSignature(private_x509_ocsp_request_t *this,
oid = OID_SHA1_WITH_RSA; oid = OID_SHA1_WITH_RSA;
scheme = SIGN_RSA_EMSA_PKCS1_SHA1; scheme = SIGN_RSA_EMSA_PKCS1_SHA1;
break; break;
case KEY_ECDSA:
oid = OID_ECDSA_WITH_SHA1;
scheme = SIGN_ECDSA_WITH_SHA1;
break;
default: default:
DBG1("unable to sign OCSP request, %N signature not supported", DBG1("unable to sign OCSP request, %N signature not supported",
key_type_names, this->key->get_type(this->key)); key_type_names, this->key->get_type(this->key));

3
src/libstrongswan/plugins/x509/x509_ocsp_response.c
View File

@ -745,6 +745,9 @@ static bool issued_by(private_x509_ocsp_response_t *this, certificate_t *issuer)
case OID_SHA512_WITH_RSA: case OID_SHA512_WITH_RSA:
scheme = SIGN_RSA_EMSA_PKCS1_SHA512; scheme = SIGN_RSA_EMSA_PKCS1_SHA512;
break; break;
case OID_ECDSA_WITH_SHA1:
scheme = SIGN_ECDSA_WITH_SHA1;
break;
default: default:
return FALSE; return FALSE;
} }