Support RSA_NO_PADDING signature requests from OpenSSL

OpenSC / pkcs11-helper

Library that simplifies the interaction with PKCS#11 providers for end-user applications using a simple API and optional OpenSSL engine

Other

66 stars 43 forks source link

Support RSA_NO_PADDING signature requests from OpenSSL #22

Closed selvanair closed 5 years ago

selvanair commented 5 years ago

When PSS padding is in use, OpenSSL pre-pads the data and requests signature with padding=RSA_NO_PADDING. Handle this using CKM_RSA_X_509 as the mechanism.

Signed-off-by: Selva Nair selva.nair@gmail.com

alonbl commented 5 years ago

Please also rename patch title to:

openssl: Support RSA_NO_PADDING padding

Or something similar.

Thanks!

selvanair commented 5 years ago

Changes:

if .. else --> switch
handle RSA_NO_PADDING in the decrypt callback as well
update the patch title

alonbl commented 5 years ago

Thanks!

asomers commented 4 years ago

Why was this PR closed? The issue is still present, and the patch works for me.

selvanair commented 4 years ago

It was committed to master in April see commit c192bb4 ...

asomers commented 4 years ago

Sorry; I missed that somehow.