[gnutls-devel] GnuTLS | Cannot use TPMv2 EC key with TLSv1.3; silent failure (#1234)

[Read-only notification of GnuTLS library development activities]

David Woodhouse commented:


This is what I get using the same key from a file:
```
HSK[0x1f7df10]: CERTIFICATE REQUEST (13) was received. Length 70[70], frag offset 0, frag length: 70, sequence: 0
HSK[0x1f7df10]: parsing certificate request
EXT[0x1f7df10]: rcvd signature algo (4.1) RSA-SHA256
EXT[0x1f7df10]: rcvd signature algo (8.9) RSA-PSS-SHA256
EXT[0x1f7df10]: rcvd signature algo (8.4) RSA-PSS-RSAE-SHA256
EXT[0x1f7df10]: rcvd signature algo (4.3) ECDSA-SECP256R1-SHA256
EXT[0x1f7df10]: rcvd signature algo (8.7) EdDSA-Ed25519
EXT[0x1f7df10]: rcvd signature algo (5.1) RSA-SHA384
EXT[0x1f7df10]: rcvd signature algo (8.10) RSA-PSS-SHA384
EXT[0x1f7df10]: rcvd signature algo (8.5) RSA-PSS-RSAE-SHA384
EXT[0x1f7df10]: rcvd signature algo (5.3) ECDSA-SECP384R1-SHA384
EXT[0x1f7df10]: rcvd signature algo (8.8) EdDSA-Ed448
EXT[0x1f7df10]: rcvd signature algo (6.1) RSA-SHA512
EXT[0x1f7df10]: rcvd signature algo (8.11) RSA-PSS-SHA512
EXT[0x1f7df10]: rcvd signature algo (8.6) RSA-PSS-RSAE-SHA512
EXT[0x1f7df10]: rcvd signature algo (6.3) ECDSA-SECP521R1-SHA512
EXT[0x1f7df10]: rcvd signature algo (2.1) RSA-SHA1
EXT[0x1f7df10]: rcvd signature algo (2.3) ECDSA-SHA1
EXT[0x1f7df10]: rcvd signature algo (2.2) (null)
checking cert compat with RSA-SHA256
cannot use privkey of EC/ECDSA with RSA-SHA256
checking cert compat with RSA-PSS-SHA256
cannot use privkey of EC/ECDSA with RSA-PSS-SHA256
checking cert compat with RSA-PSS-RSAE-SHA256
cannot use privkey of EC/ECDSA with RSA-PSS-RSAE-SHA256
checking cert compat with ECDSA-SECP256R1-SHA256
ASSERT: buffers.c[get_last_packet]:1168
READ: Got 5 bytes from 0x5
READ: read 5 bytes from 0x5
RB: Have 0 bytes into buffer. Adding 5 bytes.
```

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1234#note_572941862
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20210511/09e1857d/attachment-0001.html>