commit b8a2bdbdc8c467762f1bb0c2d103c566fe9703a7
parent 5656144290754254f2b10dfc941a652c4c2ba1e4
Author: Nick Mathewson <nickm@torproject.org>
Date: Wed, 5 Sep 2018 16:49:15 -0400
Backport to older NSS, which does not have SEC_DerSignDataWithAlgorithmID
Diffstat:
1 file changed, 8 insertions(+), 0 deletions(-)
diff --git a/src/lib/tls/x509_nss.c b/src/lib/tls/x509_nss.c
@@ -114,11 +114,19 @@ tor_tls_create_certificate_internal(crypto_pk_t *rsa,
if (!tmp)
goto err;
+#if 0
s = SEC_DerSignDataWithAlgorithmID(cert->arena,
&signed_der,
der.data, der.len,
(SECKEYPrivateKey *)signing_key,//const
&cert->signature);
+#else
+ s = SEC_DerSignData(cert->arena,
+ &signed_der,
+ der.data, der.len,
+ (SECKEYPrivateKey *)signing_key,//const
+ SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION);
+#endif
if (s != SECSuccess)
goto err;