Implemented full BLISS support for IKEv2 public key authentication and the pki tool

2014-11-29 14:51:18 +01:00
parent 43d9247599
commit b6bb32e658
17 changed files with 97 additions and 18 deletions
@@ -335,6 +335,11 @@ static int sign_crl()
 		error = "CA private key does not match CA certificate";
 		goto error;
 	}
+	if (private->get_type(private) == KEY_BLISS)
+	{
+		/* currently only SHA-512 is supported */
+		digest = HASH_SHA512;
+	}

 	if (basecrl)
 	{