james/yubikey.rs
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

mark all bits of the signature as used

Browse Source 
the first byte of a bit string marks how many bits should be
subtracted, make sure this doesn't get set.
This commit is contained in:
Klas Lindfors
2015-01-14 12:52:10 +01:00
parent f86ded25bf
commit f69a4ff8f6
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tool/yubico-piv-tool.c
+6
View File
@@ -690,6 +690,8 @@ static bool request_certificate(ykpiv_state *state, enum enum_key_format key_for
goto request_out; goto request_out;
} }
M_ASN1_BIT_STRING_set(req->signature, signature, sig_len); M_ASN1_BIT_STRING_set(req->signature, signature, sig_len);
/* mark that all bits should be used. */
req->signature->flags = ASN1_STRING_FLAG_BITS_LEFT;
} }
if(key_format == key_format_arg_PEM) { if(key_format == key_format_arg_PEM) {
@@ -889,6 +891,10 @@ static bool selfsign_certificate(ykpiv_state *state, enum enum_key_format key_fo
goto selfsign_out; goto selfsign_out;
} }
M_ASN1_BIT_STRING_set(x509->signature, signature, sig_len); M_ASN1_BIT_STRING_set(x509->signature, signature, sig_len);
/* setting flags to ASN1_STRING_FLAG_BITS_LEFT here marks that no bits
* should be subtracted from the bit string, thus making sure that the
* certificate can be validated. */
x509->signature->flags = ASN1_STRING_FLAG_BITS_LEFT;
} }
if(key_format == key_format_arg_PEM) { if(key_format == key_format_arg_PEM) {