[gnutls-devel] GnuTLS | WIP: Eddsa via pkcs11 (!790)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Fri Nov 16 11:37:04 CET 2018


Rebasing this to master and applying the following patch, makes eddsa work under PKCS#11.
```
diff --git a/tests/pkcs11/tls-neg-pkcs11-key.c b/tests/pkcs11/tls-neg-pkcs11-key.c
index c32dee27a..0b69ae7ed 100644
--- a/tests/pkcs11/tls-neg-pkcs11-key.c
+++ b/tests/pkcs11/tls-neg-pkcs11-key.c
@@ -292,13 +292,12 @@ static const test_st tests[] = {
         .exp_kx = GNUTLS_KX_ECDHE_RSA,
         .exp_serv_err = GNUTLS_E_NO_CIPHER_SUITES
        },
-       {.name = "tls1.2: ed25519 cert, ed25519 key", /* we cannot import that key */
+       {.name = "tls1.2: ed25519 cert, ed25519 key",
         .pk = GNUTLS_PK_EDDSA_ED25519,
         .prio = "NORMAL:+ECDHE-RSA:+ECDHE-ECDSA",
         .cert = &server_ca3_eddsa_cert,
         .key = &server_ca3_eddsa_key,
-        .exp_kx = GNUTLS_KX_ECDHE_RSA,
-        .exp_key_err = GNUTLS_E_INVALID_REQUEST
+        .exp_kx = GNUTLS_KX_ECDHE_RSA
        }
 };

```

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/790#note_117770504
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181116/a2323d08/attachment.html>


More information about the Gnutls-devel mailing list