Match additional hash OIDs for signature verification. - Githubissues

fullsailor / pkcs7

Implements a subset of PKCS#7/Crytpographic Message Syntax (rfc2315, rfc5652)

MIT License

123 stars 201 forks source link

Match additional hash OIDs for signature verification. #38

Closed cmars closed 2 years ago

cmars commented 5 years ago

The PKCS#7 cert from Microsoft Azure's instance metadata service[0] specifies digital signature OIDs as the signer digest algorithm. Added support for matching these to the appropriate hash implementation.

Added a test case for an example Azure Attested Data cert.

Also added support for matching SHA384 and SHA512.

[0] https://docs.microsoft.com/en-us/azure/virtual-machines/windows/instance-metadata-service#attested-data