f55e99f7dd
We now have a split in the signature algorithms codepoint space for whether the certificate's key is for rsaEncryption or a PSS-specific key, which should let us get rid of some special-casing that we previously needed to try to coax rsaEncryption keys into performing PSS. (This will be done in a subsequent commit.) Send the new PSS-with-PSS-specific key first in our list, so that we prefer the new technology to the old one. We need to update the expected certificate type in one test, since the "RSA-PSS+SHA256" form now corresponds to a public key of type rsaEncryption, so we should expect the server certificate type to be just "RSA". If we want to get a server certificate type of "RSA-PSS", we need to use a new signature algorithm that cannot be represented as signature+hash, so add a test for that as well. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5068) |
||
|---|---|---|
| .. | ||
| 01-simple.conf | ||
| 01-simple.conf.in | ||
| 02-protocol-version.conf | ||
| 02-protocol-version.conf.in | ||
| 03-custom_verify.conf | ||
| 03-custom_verify.conf.in | ||
| 04-client_auth.conf | ||
| 04-client_auth.conf.in | ||
| 05-sni.conf | ||
| 05-sni.conf.in | ||
| 06-sni-ticket.conf | ||
| 06-sni-ticket.conf.in | ||
| 07-dtls-protocol-version.conf | ||
| 07-dtls-protocol-version.conf.in | ||
| 08-npn.conf | ||
| 08-npn.conf.in | ||
| 09-alpn.conf | ||
| 09-alpn.conf.in | ||
| 10-resumption.conf | ||
| 10-resumption.conf.in | ||
| 11-dtls_resumption.conf | ||
| 11-dtls_resumption.conf.in | ||
| 12-ct.conf | ||
| 12-ct.conf.in | ||
| 13-fragmentation.conf | ||
| 13-fragmentation.conf.in | ||
| 14-curves.conf | ||
| 14-curves.conf.in | ||
| 15-certstatus.conf | ||
| 15-certstatus.conf.in | ||
| 16-certstatus.conf | ||
| 16-dtls-certstatus.conf | ||
| 16-dtls-certstatus.conf.in | ||
| 17-renegotiate.conf | ||
| 17-renegotiate.conf.in | ||
| 18-dtls-renegotiate.conf | ||
| 18-dtls-renegotiate.conf.in | ||
| 19-mac-then-encrypt.conf | ||
| 19-mac-then-encrypt.conf.in | ||
| 20-cert-select.conf | ||
| 20-cert-select.conf.in | ||
| 21-key-update.conf | ||
| 21-key-update.conf.in | ||
| 22-compression.conf | ||
| 22-compression.conf.in | ||
| 23-srp.conf | ||
| 23-srp.conf.in | ||
| 24-padding.conf | ||
| 24-padding.conf.in | ||
| 25-cipher.conf | ||
| 25-cipher.conf.in | ||
| protocol_version.pm | ||
| ssltests_base.pm | ||