Re: [Openvpn-devel] [PATCH 2/2 v2] Handle PSS padding in cryptoapicert

2019-01-30 Thread Arne Schwabe
Am 23.01.19 um 18:48 schrieb selva.n...@gmail.com: > From: Selva Nair > > For PSS padding, CNG requires the digest to be signed > and the digest algorithm in use, which are not accessible > via the rsa_sign and rsa_priv_enc callbacks of OpenSSL. > This patch uses the EVP_KEY interface to hook to

Re: [Openvpn-devel] [PATCH 2/2 v2] Handle PSS padding in cryptoapicert

2019-01-30 Thread Selva Nair
On Wed, Jan 30, 2019 at 8:09 AM Arne Schwabe wrote: > Am 23.01.19 um 18:48 schrieb selva.n...@gmail.com: > > From: Selva Nair > > > > For PSS padding, CNG requires the digest to be signed > > and the digest algorithm in use, which are not accessible > > via the rsa_sign and rsa_priv_enc callback

[Openvpn-devel] [PATCH 2/2 v3] Handle PSS padding in cryptoapicert

2019-01-30 Thread selva . nair
From: Selva Nair For PSS padding, CNG requires the digest to be signed and the digest algorithm in use, which are not accessible via the rsa_sign and rsa_priv_enc callbacks of OpenSSL. This patch uses the EVP_KEY interface to hook to evp_pkey_sign callback if OpenSSL version is > 1.1.0. To test