strongswan.git
2 years agolibtpmtss: Extend TPM 2.0 capability info
Andreas Steffen [Mon, 4 Dec 2017 16:46:23 +0000 (17:46 +0100)]
libtpmtss: Extend TPM 2.0 capability info

2 years agoMerge branch 'android-proposals'
Tobias Brunner [Tue, 28 Nov 2017 15:23:41 +0000 (16:23 +0100)]
Merge branch 'android-proposals'

Makes IKE and ESP proposals configurable.

2 years agoandroid: Remove modp1024 from the ESP proposals
Tobias Brunner [Tue, 28 Nov 2017 15:19:08 +0000 (16:19 +0100)]
android: Remove modp1024 from the ESP proposals

2 years agotesting: Explicitly deliver all test results as text/plain
Tobias Brunner [Tue, 28 Nov 2017 15:16:18 +0000 (16:16 +0100)]
testing: Explicitly deliver all test results as text/plain

2 years agoVersion bump to 5.6.1 5.6.1
Andreas Steffen [Fri, 17 Nov 2017 21:42:28 +0000 (22:42 +0100)]
Version bump to 5.6.1

2 years agotesting: Added swanctl/rw-cert-pss scenario
Andreas Steffen [Fri, 17 Nov 2017 21:42:07 +0000 (22:42 +0100)]
testing: Added swanctl/rw-cert-pss scenario

2 years agoandroid: New release after adding configurable proposals
Tobias Brunner [Fri, 17 Nov 2017 17:07:09 +0000 (18:07 +0100)]
android: New release after adding configurable proposals

2 years agoandroid: Validate proposal strings when importing profiles
Tobias Brunner [Fri, 17 Nov 2017 16:45:52 +0000 (17:45 +0100)]
android: Validate proposal strings when importing profiles

2 years agoandroid: Validate proposal strings in the GUI
Tobias Brunner [Fri, 17 Nov 2017 16:40:52 +0000 (17:40 +0100)]
android: Validate proposal strings in the GUI

2 years agoandroid: Add utility JNI function to validate proposal strings
Tobias Brunner [Fri, 17 Nov 2017 16:26:51 +0000 (17:26 +0100)]
android: Add utility JNI function to validate proposal strings

2 years agoproposal: Move proposal_t from libcharon to libstrongswan
Tobias Brunner [Fri, 17 Nov 2017 16:15:14 +0000 (17:15 +0100)]
proposal: Move proposal_t from libcharon to libstrongswan

This allows us to use it without having to initialize libcharon, which
was required for the logging (we probably could have included debug.h
instead of daemon.h to workaround that but this seems more correct).

2 years agoandroid: Load JNI libraries in Application class
Tobias Brunner [Fri, 17 Nov 2017 15:41:52 +0000 (16:41 +0100)]
android: Load JNI libraries in Application class

This way they are also loaded when we don't use CharonVpnService.

2 years agoandroid: Make IKE/ESP proposals configurable in the GUI
Tobias Brunner [Tue, 14 Nov 2017 10:18:13 +0000 (11:18 +0100)]
android: Make IKE/ESP proposals configurable in the GUI

2 years agoandroid: Import IKE/ESP proposals
Tobias Brunner [Tue, 14 Nov 2017 09:23:09 +0000 (10:23 +0100)]
android: Import IKE/ESP proposals

We currently don't validate them here, only when used later will they
get parsed (which includes some checks).

2 years agoandroid: Use optional custom proposals for IKE and ESP
Tobias Brunner [Tue, 14 Nov 2017 08:49:24 +0000 (09:49 +0100)]
android: Use optional custom proposals for IKE and ESP

If the proposal is invalid we fall back to the defaults.

2 years agoandroid: Add properties for IKE and ESP proposals
Tobias Brunner [Tue, 14 Nov 2017 09:18:59 +0000 (10:18 +0100)]
android: Add properties for IKE and ESP proposals

2 years agoandroid: Free settings string passed via JNI
Tobias Brunner [Fri, 10 Nov 2017 17:14:26 +0000 (18:14 +0100)]
android: Free settings string passed via JNI

2 years agoNEWS: Added some news for 5.6.1
Tobias Brunner [Fri, 17 Nov 2017 08:30:02 +0000 (09:30 +0100)]
NEWS: Added some news for 5.6.1

2 years agohashers: Change names of SHA2 hash algorithms
Tobias Brunner [Fri, 17 Nov 2017 08:31:19 +0000 (09:31 +0100)]
hashers: Change names of SHA2 hash algorithms

Keep the lower case names as they are as we use them internally (parsing
and e.g. in OpenSSL as identifier).

2 years agoikev2: Add hash algorithm used for RSASSA-PSS signature to log message
Tobias Brunner [Wed, 8 Nov 2017 17:08:08 +0000 (18:08 +0100)]
ikev2: Add hash algorithm used for RSASSA-PSS signature to log message

2 years agohasher: Add uppercase short names for hash algorithms
Tobias Brunner [Thu, 16 Nov 2017 16:13:36 +0000 (17:13 +0100)]
hasher: Add uppercase short names for hash algorithms

2 years agotesting: Configure logging via syslog in strongswan.conf
Tobias Brunner [Fri, 10 Nov 2017 15:12:29 +0000 (16:12 +0100)]
testing: Configure logging via syslog in strongswan.conf

Globally configure logging in strongswan.conf.testing and replace all
charondebug statements with strongswan.conf settings.

2 years agotesting: Disable logging via journal in charon-systemd
Tobias Brunner [Wed, 15 Nov 2017 16:11:34 +0000 (17:11 +0100)]
testing: Disable logging via journal in charon-systemd

This avoids duplicate log messages as we already log via syslog to get
daemon.log.

2 years agotesting: Globally define logging via syslog for charon-systemd
Tobias Brunner [Fri, 10 Nov 2017 14:53:52 +0000 (15:53 +0100)]
testing: Globally define logging via syslog for charon-systemd

We could make the same change for charon (actually setting it for charon
in strongswan.conf.testing would work for charon-systemd too), however,
there are dozens of test cases that currently set charondebug in
ipsec.conf.

2 years agox509: Initialize signature params when parsing attribute certificates
Tobias Brunner [Wed, 15 Nov 2017 13:41:56 +0000 (14:41 +0100)]
x509: Initialize signature params when parsing attribute certificates

2 years agosw-collector: Unmap history file on failure to instantiate extractor
Tobias Brunner [Wed, 15 Nov 2017 13:40:10 +0000 (14:40 +0100)]
sw-collector: Unmap history file on failure to instantiate extractor

2 years agocharon: Explicitly check return value of fileno()
Tobias Brunner [Wed, 15 Nov 2017 13:35:42 +0000 (14:35 +0100)]
charon: Explicitly check return value of fileno()

This is mainly for Coverity because fchown() can't take a negative
value, which the -1 check implies is possible.

2 years agopkcs8: Add explicit comment for RSASSA-PSS fall-through
Tobias Brunner [Wed, 15 Nov 2017 13:33:05 +0000 (14:33 +0100)]
pkcs8: Add explicit comment for RSASSA-PSS fall-through

2 years agoThe pacman tool got replaced by the sec-updater tool
Tobias Brunner [Wed, 15 Nov 2017 11:18:17 +0000 (12:18 +0100)]
The pacman tool got replaced by the sec-updater tool

2 years agosec-updater: Fix typo in documentation
Tobias Brunner [Wed, 15 Nov 2017 11:10:33 +0000 (12:10 +0100)]
sec-updater: Fix typo in documentation

2 years agoFixed some typos, courtesy of codespell
Tobias Brunner [Wed, 15 Nov 2017 09:21:13 +0000 (10:21 +0100)]
Fixed some typos, courtesy of codespell

2 years agoswanctl: Add check for conflicting short options
Tobias Brunner [Mon, 13 Nov 2017 09:09:05 +0000 (10:09 +0100)]
swanctl: Add check for conflicting short options

2 years agoswanctl: Properly register --counters commmand
Tobias Brunner [Mon, 13 Nov 2017 08:45:14 +0000 (09:45 +0100)]
swanctl: Properly register --counters commmand

Use C instead of c, which is already used for --load-conns.

2 years agotesting: Do not remove all swanctl subdirectories
Andreas Steffen [Sat, 11 Nov 2017 18:23:01 +0000 (19:23 +0100)]
testing: Do not remove all swanctl subdirectories

2 years agoVersion bump to 5.6.1rc1 5.6.1rc1
Andreas Steffen [Sat, 11 Nov 2017 17:25:17 +0000 (18:25 +0100)]
Version bump to 5.6.1rc1

2 years agoMerge branch 'swanctl-testing'
Andreas Steffen [Sat, 11 Nov 2017 15:42:38 +0000 (16:42 +0100)]
Merge branch 'swanctl-testing'

2 years agolibimcv: Updated imv database
Andreas Steffen [Sat, 11 Nov 2017 15:39:30 +0000 (16:39 +0100)]
libimcv: Updated imv database

2 years agotesting: Converterd tnc to systemd
Andreas Steffen [Sat, 11 Nov 2017 15:36:43 +0000 (16:36 +0100)]
testing: Converterd tnc to systemd

2 years agotesting: Converted sql to systemd
Andreas Steffen [Sat, 11 Nov 2017 06:18:51 +0000 (07:18 +0100)]
testing: Converted sql to systemd

2 years agotesting: Converted swanctl to systemd
Andreas Steffen [Fri, 10 Nov 2017 16:21:40 +0000 (17:21 +0100)]
testing: Converted swanctl to systemd

2 years agotesting: Added legacy ipv6-stroke scenarios
Andreas Steffen [Sun, 29 Oct 2017 19:39:10 +0000 (20:39 +0100)]
testing: Added legacy ipv6-stroke scenarios

2 years agotesting: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl
Andreas Steffen [Fri, 10 Nov 2017 12:50:24 +0000 (13:50 +0100)]
testing: Converted ipv6/rw-ip6-in-ip4-ikev2 to swanctl

2 years agotesting: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl
Andreas Steffen [Fri, 10 Nov 2017 12:42:29 +0000 (13:42 +0100)]
testing: Converted ipv6/rw-ip6-in-ip4-ikev1 to swanctl

2 years agotesting: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl
Andreas Steffen [Fri, 10 Nov 2017 11:39:36 +0000 (12:39 +0100)]
testing: Converted ipv6/net2net-ip6-in-ip4-ikev2 to swanctl

2 years agotesting: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl
Andreas Steffen [Fri, 10 Nov 2017 11:28:24 +0000 (12:28 +0100)]
testing: Converted ipv6/net2net-ip6-in-ip4-ikev1 to swanctl

2 years agotesting: Converted ipv6/rw-rfc3779-ikev2 to swanctl
Andreas Steffen [Fri, 10 Nov 2017 10:28:28 +0000 (11:28 +0100)]
testing: Converted ipv6/rw-rfc3779-ikev2 to swanctl

2 years agotesting: Converted ipv6/rw-compress-ikev2 to swanctl
Andreas Steffen [Thu, 9 Nov 2017 16:49:03 +0000 (17:49 +0100)]
testing: Converted ipv6/rw-compress-ikev2 to swanctl

2 years agotesting: Converted ipv6/rw-psk-ikev2 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 19:23:03 +0000 (20:23 +0100)]
testing: Converted ipv6/rw-psk-ikev2 to swanctl

2 years agotesting: Converted ipv6/rw-psk-ikev1 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 18:53:45 +0000 (19:53 +0100)]
testing: Converted ipv6/rw-psk-ikev1 to swanctl

2 years agotesting: Converted ipv6/rw-ikev2 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 15:52:51 +0000 (16:52 +0100)]
testing: Converted ipv6/rw-ikev2 to swanctl

2 years agotesting: Converted ipv6/rw-ikev1 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 15:48:19 +0000 (16:48 +0100)]
testing: Converted ipv6/rw-ikev1 to swanctl

2 years agotesting: Converted ipv6/net2net-rfc3779-ikev2 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 14:38:45 +0000 (15:38 +0100)]
testing: Converted ipv6/net2net-rfc3779-ikev2 to swanctl

2 years agotesting: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 11:17:29 +0000 (12:17 +0100)]
testing: Converted ipv6/net2net-ip4-in-ip6-ikev2 to swanctl

2 years agotesting: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl
Andreas Steffen [Sun, 29 Oct 2017 10:29:09 +0000 (11:29 +0100)]
testing: Converted ipv6/net2net-ip4-in-ip6-ikev1 to swanctl

2 years agotesting: Converted ipv6/transport-ikev2 to swanctl
Andreas Steffen [Thu, 19 Oct 2017 19:27:37 +0000 (21:27 +0200)]
testing: Converted ipv6/transport-ikev2 to swanctl

2 years agotesting: Converted ipv6/transport-ikev1 to swanctl
Andreas Steffen [Thu, 19 Oct 2017 19:20:01 +0000 (21:20 +0200)]
testing: Converted ipv6/transport-ikev1 to swanctl

2 years agotesting: Converted ipv6/net2net-ikev2 to swanctl
Andreas Steffen [Thu, 19 Oct 2017 19:03:53 +0000 (21:03 +0200)]
testing: Converted ipv6/net2net-ikev2 to swanctl

2 years agotesting: Converted ipv6/net2net-ikev1 to swanctl
Andreas Steffen [Thu, 19 Oct 2017 18:46:00 +0000 (20:46 +0200)]
testing: Converted ipv6/net2net-ikev1 to swanctl

2 years agotesting: Converted ipv6/host2host-ikev2 to swanctl
Andreas Steffen [Thu, 19 Oct 2017 15:46:39 +0000 (17:46 +0200)]
testing: Converted ipv6/host2host-ikev2 to swanctl

2 years agotesting: Converted ipv6/host2host-ikev1 to swanctl
Andreas Steffen [Tue, 17 Oct 2017 09:44:17 +0000 (11:44 +0200)]
testing: Converted ipv6/host2host-ikev1 to swanctl

2 years agotesting: Removed libipsec/rw-suite-b
Andreas Steffen [Tue, 10 Oct 2017 19:14:50 +0000 (21:14 +0200)]
testing: Removed libipsec/rw-suite-b

2 years agotesting: Converted libipsec/net2net-null to swanctl
Andreas Steffen [Tue, 10 Oct 2017 18:51:27 +0000 (20:51 +0200)]
testing: Converted libipsec/net2net-null to swanctl

2 years agotesting: Converted libipsec/net2net-cert-ipv6 to swanctl
Andreas Steffen [Sun, 8 Oct 2017 17:16:55 +0000 (19:16 +0200)]
testing: Converted libipsec/net2net-cert-ipv6 to swanctl

2 years agotesting: Converted libipsec/net2net-cert to swanctl
Andreas Steffen [Thu, 5 Oct 2017 07:35:59 +0000 (09:35 +0200)]
testing: Converted libipsec/net2net-cert to swanctl

2 years agotesting: Converted libipsec/net2net-3des to swanctl
Andreas Steffen [Thu, 5 Oct 2017 12:05:15 +0000 (14:05 +0200)]
testing: Converted libipsec/net2net-3des to swanctl

2 years agotesting: Converted libipsec/host2host-cert to swanctl
Andreas Steffen [Wed, 4 Oct 2017 18:34:51 +0000 (20:34 +0200)]
testing: Converted libipsec/host2host-cert to swanctl

2 years agotesting: Converted gcrypt-ikev2 to swanctl
Andreas Steffen [Fri, 1 Sep 2017 19:10:00 +0000 (21:10 +0200)]
testing: Converted gcrypt-ikev2 to swanctl

2 years agotesting: Converted gcrypt-ikev1 to systemd
Andreas Steffen [Thu, 19 Oct 2017 14:36:46 +0000 (16:36 +0200)]
testing: Converted gcrypt-ikev1 to systemd

2 years agotesting: Converted af-alg to systemd
Andreas Steffen [Wed, 18 Oct 2017 09:45:14 +0000 (11:45 +0200)]
testing: Converted af-alg to systemd

2 years agotesting: Enable systemd
Andreas Steffen [Tue, 17 Oct 2017 09:52:08 +0000 (11:52 +0200)]
testing: Enable systemd

2 years agotesting: Updated some descriptions
Andreas Steffen [Fri, 1 Sep 2017 16:14:04 +0000 (18:14 +0200)]
testing: Updated some descriptions

2 years agolibtpmtss: Added missing argument in hasher_from_signature_scheme()
Andreas Steffen [Fri, 10 Nov 2017 10:47:27 +0000 (11:47 +0100)]
libtpmtss: Added missing argument in hasher_from_signature_scheme()

2 years agocharon-tkm: Unlink PID file after deinit
Tobias Brunner [Tue, 7 Nov 2017 09:44:22 +0000 (10:44 +0100)]
charon-tkm: Unlink PID file after deinit

Same change as for charon in the previous commit.

References #2460.

2 years agocharon: Unlink PID file after daemon deinit (i.e. after unloading plugins etc.)
Tobias Brunner [Tue, 7 Nov 2017 09:30:05 +0000 (10:30 +0100)]
charon: Unlink PID file after daemon deinit (i.e. after unloading plugins etc.)

Make sure, though, that we only remove the file if we actually
created it (e.g. not for --help or --version).  And do so before
deinitializing libstrongswan due to leak detective.

Fixes #2460.

2 years agounit-tests: Rename targets for libstrongswan and kernel-netlink
Thomas Egerer [Wed, 8 Nov 2017 17:16:52 +0000 (18:16 +0100)]
unit-tests: Rename targets for libstrongswan and kernel-netlink

libstrongswan and kernel-netlink are the only two components which do
not adhere to the naming scheme used for all other tests. If the tests
are run by an external application this imposes problems due to clashing
names.

Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com>
2 years agoMerge branch 'rsassa-pss'
Tobias Brunner [Wed, 8 Nov 2017 15:48:37 +0000 (16:48 +0100)]
Merge branch 'rsassa-pss'

This adds support for RSASSA-PSS signatures in IKEv2 digital signature
authentication (RFC 7427), certificates and CRLs etc., and when signing
credentials via pki tool.  For interoperability with older versions, the
default is to use classic PKCS#1 signatures.  To use PSS padding either enable
rsa_pss via strongswan.conf or explicitly use it either via ike:rsa/pss...
auth token or the --rsa-padding option of the pki tool.

References #2427.

2 years agoauth-cfg: Add RSA/PSS schemes for pubkey and rsa if enabled in strongswan.conf
Tobias Brunner [Tue, 31 Oct 2017 13:20:28 +0000 (14:20 +0100)]
auth-cfg: Add RSA/PSS schemes for pubkey and rsa if enabled in strongswan.conf

Also document the rsa/pss prefix.

2 years agopki: Enable PSS padding if enabled in strongswan.conf
Tobias Brunner [Mon, 30 Oct 2017 16:54:44 +0000 (17:54 +0100)]
pki: Enable PSS padding if enabled in strongswan.conf

2 years agopki: Optionally generate RSA/PSS signatures
Tobias Brunner [Mon, 30 Oct 2017 14:10:46 +0000 (15:10 +0100)]
pki: Optionally generate RSA/PSS signatures

2 years agopki: Indent usage lines properly automatically
Tobias Brunner [Mon, 30 Oct 2017 13:55:44 +0000 (14:55 +0100)]
pki: Indent usage lines properly automatically

2 years agoTreat RSASSA-PSS keys like rsaEncryption RSA keys
Tobias Brunner [Fri, 27 Oct 2017 13:09:46 +0000 (15:09 +0200)]
Treat RSASSA-PSS keys like rsaEncryption RSA keys

In theory we should treat any parameters and the identifier itself as
restriction to only use the key to create signatures accordingly (e.g.
only use RSA with PSS padding or even use specific hash algorithms).
But that's currently tricky as we'd have to store and pass this information
along with our private keys (i.e. use PKCS#8 to store them and change the
builder calls to pass along the identifier and parameters). That would
require quite some work.

2 years agoopenssl: Add support for signature schemes with parameters
Tobias Brunner [Fri, 27 Oct 2017 12:29:50 +0000 (14:29 +0200)]
openssl: Add support for signature schemes with parameters

2 years agopki: Properly forward digest to attribute certificate builder
Tobias Brunner [Fri, 27 Oct 2017 11:49:29 +0000 (13:49 +0200)]
pki: Properly forward digest to attribute certificate builder

2 years agox509: Add support for signature schemes with parameters
Tobias Brunner [Fri, 27 Oct 2017 09:18:35 +0000 (11:18 +0200)]
x509: Add support for signature schemes with parameters

Also adds support for specifying the hash algorithm for attribute
certificate signatures.

2 years agobuilder: Add builder option to pass signature scheme and params
Tobias Brunner [Fri, 27 Oct 2017 09:06:14 +0000 (11:06 +0200)]
builder: Add builder option to pass signature scheme and params

2 years agoikev2: Use helpers to build signature auth data
Tobias Brunner [Tue, 24 Oct 2017 11:49:14 +0000 (13:49 +0200)]
ikev2: Use helpers to build signature auth data

2 years agosignature-params: Add helpers to parse/build ASN.1 algorithmIdentifier for signature...
Tobias Brunner [Tue, 24 Oct 2017 11:45:31 +0000 (13:45 +0200)]
signature-params: Add helpers to parse/build ASN.1 algorithmIdentifier for signature schemes

2 years agoikev2: Enumerate RSA/PSS schemes and use them if enabled
Tobias Brunner [Mon, 16 Oct 2017 16:09:38 +0000 (18:09 +0200)]
ikev2: Enumerate RSA/PSS schemes and use them if enabled

2 years agoikev2: Support signing with RSASSA-PSS via RFC 7427 signature auth
Tobias Brunner [Mon, 2 Oct 2017 14:21:13 +0000 (16:21 +0200)]
ikev2: Support signing with RSASSA-PSS via RFC 7427 signature auth

2 years agosignature-params: Use helper to build MGF1 algorithmIdentifier
Tobias Brunner [Mon, 2 Oct 2017 14:10:40 +0000 (16:10 +0200)]
signature-params: Use helper to build MGF1 algorithmIdentifier

2 years agoasn1: Add helper function to create algorithmIdentifier with parameters
Tobias Brunner [Mon, 2 Oct 2017 14:08:46 +0000 (16:08 +0200)]
asn1: Add helper function to create algorithmIdentifier with parameters

2 years agoikev2: Verify RSASSA-PSS signatures via RFC 7427 signature auth
Tobias Brunner [Mon, 2 Oct 2017 13:57:17 +0000 (15:57 +0200)]
ikev2: Verify RSASSA-PSS signatures via RFC 7427 signature auth

2 years agokeymat_v2: Pass/receive signature schemes as signature_param_t objects
Tobias Brunner [Mon, 16 Oct 2017 14:41:55 +0000 (16:41 +0200)]
keymat_v2: Pass/receive signature schemes as signature_param_t objects

2 years agoauth-cfg: Parse rsa/pss auth tokens
Tobias Brunner [Fri, 13 Oct 2017 13:32:29 +0000 (15:32 +0200)]
auth-cfg: Parse rsa/pss auth tokens

2 years agoauth-cfg: Store signature schemes as signature_params_t objects
Tobias Brunner [Fri, 13 Oct 2017 13:02:02 +0000 (15:02 +0200)]
auth-cfg: Store signature schemes as signature_params_t objects

Due to circular references the hasher_from_signature_scheme() helper
does not take a signature_params_t object.

2 years agocertificate: Return signature scheme and parameters from issued_by() method
Tobias Brunner [Fri, 13 Oct 2017 12:33:43 +0000 (14:33 +0200)]
certificate: Return signature scheme and parameters from issued_by() method

This also required some include restructuring (avoid including library.h
in headers) to avoid unresolvable circular dependencies.

2 years agosignature-params: Add helper struct for signature scheme and parameters
Tobias Brunner [Tue, 10 Oct 2017 13:52:19 +0000 (15:52 +0200)]
signature-params: Add helper struct for signature scheme and parameters

2 years agoandroid: Add support for creating RSASSA-PSS signatures via JNI
Tobias Brunner [Tue, 26 Sep 2017 16:35:59 +0000 (18:35 +0200)]
android: Add support for creating RSASSA-PSS signatures via JNI

2 years agounit-tests: Add RSA-PSS signature tests with specific salts
Tobias Brunner [Tue, 26 Sep 2017 14:46:42 +0000 (16:46 +0200)]
unit-tests: Add RSA-PSS signature tests with specific salts

2 years agogcrypt: Add support for static salts when signing with RSA-PSS
Tobias Brunner [Tue, 26 Sep 2017 14:44:44 +0000 (16:44 +0200)]
gcrypt: Add support for static salts when signing with RSA-PSS