denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added workaround to parse PEM encoded PGP key with KEY_RSA

Browse Source
This commit is contained in:
Martin Willi
2009-08-28 17:25:07 +02:00
parent 4593ef51fd
commit bf3b8c90d0
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/pem/pem_builder.c
+7
View File
@@ -392,6 +392,13 @@ static void *build_from_blob(private_builder_t *this, chunk_t blob)
chunk_clear(&blob); chunk_clear(&blob);
return NULL; return NULL;
} }
if (pgp && this->type == CRED_PRIVATE_KEY)
{
/* PGP encoded keys are parsed with a KEY_ANY key type, as it
* can contain any type of key. However, ipsec.secrets uses
* RSA for PGP keys, which is actually wrong. */
this->subtype = KEY_ANY;
}
} }
cred = lib->creds->create(lib->creds, this->type, this->subtype, cred = lib->creds->create(lib->creds, this->type, this->subtype,
pgp ? BUILD_BLOB_PGP : BUILD_BLOB_ASN1_DER, blob, pgp ? BUILD_BLOB_PGP : BUILD_BLOB_ASN1_DER, blob,