[gnutls-help] signing

Jeremy Harris jgh at wizmail.org
Sun May 21 23:24:14 CEST 2017


Hi,

gnutls_x509_privkey_sign_data() is documented as working with
an MD5 or SHA1 disgest method:

 https://www.gnutls.org/manual/html_node/X509-certificate-API.html#index-gnutls_005fx509_005fprivkey_005fsign_005fdata


I've seen code calling it with GNUTLS_DIG_SHA256.

a) is this properly supported?
b) are others?  I'm interested in the methods suggested
   for future DKIM versions:

  https://tools.ietf.org/html/draft-srose-dkim-ecc-00

namely SHA512 and possibly SHA-3.
-- 
Thanks,
  Jeremy



More information about the Gnutls-help mailing list