Skip to content

Conversation

@lumag
Copy link
Contributor

@lumag lumag commented Apr 18, 2023

Switch to using RsaPssParams::new() from pkcs1 crate. This fixes the issue reported by zlint for x509-cert, where SHA* digest algorithms had empty parameters instead of NULL parameters (as required by Mozilla policy and permitted by RFC4055).

Switch to using RsaPssParams::new() from pkcs1 crate. This fixes the
issue reported by zlint for x509-cert, where SHA* digest algorithms had
empty parameters instead of NULL parameters (as required by Mozilla
policy and permitted by RFC4055).

Signed-off-by: Dmitry Baryshkov <[email protected]>
@lumag
Copy link
Contributor Author

lumag commented Apr 18, 2023

cc @baloo @dignifiedquire

@lumag lumag marked this pull request as ready for review April 18, 2023 16:35
@tarcieri tarcieri merged commit a6fd36d into RustCrypto:master Apr 18, 2023
@lumag lumag deleted the pss-sha-NULL branch April 18, 2023 18:08
@lumag
Copy link
Contributor Author

lumag commented Apr 18, 2023

@tarcieri thank you! Could you please cut another prerelease?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants