Pass through nil as digest when signing certificates

ruby / openssl

Provides SSL, TLS and general purpose cryptography.

Other

240 stars 167 forks source link

Pass through nil as digest when signing certificates #761

Closed gartens closed 5 months ago

gartens commented 6 months ago

In order to sign certificates with Ed25519 keys, NULL must be passed as md to X509_sign. This NULL is then passed (via ASN1_item_sign_ex) as type to EVP_DigestSignInit. The documentation of EVP_DigestSignInit states that type must be NULL for various key types, including Ed25519.

rhenium commented 5 months ago

Looks good to me. Thank you!