denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

x509_t.build_encoding() now supports any hash algorithm

Browse Source
This commit is contained in:
Andreas Steffen
2008-01-22 01:32:12 +00:00
parent a7419b07d1
commit 2d49eaa131
1 changed files with 32 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/crypto/x509.c
+32 -13
View File
@@ -1381,23 +1381,42 @@ static chunk_t x509_build_tbs(private_x509_t *this)
static void build_encoding(private_x509_t *this, hash_algorithm_t alg, static void build_encoding(private_x509_t *this, hash_algorithm_t alg,
rsa_private_key_t *private_key) rsa_private_key_t *private_key)
{ {
chunk_t tbs_cert, rawSignature, signature; switch (alg)
u_char *pos; {
case HASH_MD5:
this->signatureAlgorithm = OID_MD5_WITH_RSA;
break;
case HASH_SHA1:
default:
this->signatureAlgorithm = OID_SHA1_WITH_RSA;
break;
case HASH_SHA256:
this->signatureAlgorithm = OID_SHA256_WITH_RSA;
break;
case HASH_SHA384:
this->signatureAlgorithm = OID_SHA384_WITH_RSA;
break;
case HASH_SHA512:
this->signatureAlgorithm = OID_SHA512_WITH_RSA;
}
this->tbsCertificate = x509_build_tbs(this);
{
chunk_t rawSignature;
u_char *pos;
this->signatureAlgorithm = OID_SHA1_WITH_RSA; private_key->build_emsa_pkcs1_signature(private_key, alg,
tbs_cert = x509_build_tbs(this); this->tbsCertificate, &rawSignature);
private_key->build_emsa_pkcs1_signature(private_key, alg, tbs_cert,
&rawSignature);
pos = build_asn1_object(&signature, ASN1_BIT_STRING, 1 + rawSignature.len);
*pos++ = 0x00;
memcpy(pos, rawSignature.ptr, rawSignature.len);
free(rawSignature.ptr);
pos = build_asn1_object(&this->signature, ASN1_BIT_STRING,
1 + rawSignature.len);
*pos++ = 0x00;
memcpy(pos, rawSignature.ptr, rawSignature.len);
free(rawSignature.ptr);
}
this->certificate = asn1_wrap(ASN1_SEQUENCE, "mcm", this->certificate = asn1_wrap(ASN1_SEQUENCE, "mcm",
tbs_cert, this->tbsCertificate,
asn1_algorithmIdentifier(this->signatureAlgorithm), asn1_algorithmIdentifier(this->signatureAlgorithm),
signature); this->signature);
} }