denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libstrongswan: Encode RSA-PSS algorithmIdentifier variant

Browse Source 
Some third party IKEv2 products expect an RSA-PSS ASN.1
algorithmIdentifier with an explicit trailerField value (CONTEXT3)
instead of the DEFAULT value if the trailerField is missing.

The setting charon.rsa_pss_trailerfield = yes enables the explicit
encoding.
This commit is contained in:
Andreas Steffen
2022-09-06 21:15:43 +02:00
parent bf3f678551
commit 747e840912
2 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+4
View File
@@ -408,6 +408,10 @@ charon.routing_table_prio
charon.rsa_pss = no
Whether to use RSA with PSS padding instead of PKCS#1 padding by default.
charon.rsa_pss_trailerfield = no
Whether to encode an explicit trailerField value of 0x01 in the RSA-PSS
algorithmIdentifier (CONTEXT3) or using the DEFAULT value by omitting it.
charon.send_delay = 0
Delay in ms for sending packets, to simulate larger RTT.