unit-tests: Point out if ECDSA public key was rejected after private keys was not

AWS-LC rejects public keys with explicitly encoded parameters but allows
private keys that use explicit encodings of the NIST curves.  Since the
more important aspect is that public keys are rejected, this addition to
the warning message points that out.

References strongswan/strongswan#1907
This commit is contained in:
Tobias Brunner
2024-03-13 16:47:20 +01:00
parent 6f8275abab
commit 6628c523c2
+2 -1
View File
@@ -413,7 +413,8 @@ START_TEST(test_load_reject_explicit_params)
if (privkey)
{
privkey->destroy(privkey);
warn("ECDSA private key with explicit parameters not rejected");
warn("ECDSA private key with explicit parameters not rejected%s",
pubkey ? "" : ", but at least the public key was");
}
}
END_TEST