Closed Bug 1309446 Opened 4 years ago Closed 4 years ago

Configure signature schemes not hash+signature

Categories

(NSS :: Libraries, defect)

3.28
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: mt, Unassigned)

References

Details

The current SSL_SignaturePref(Get|Set) API takes a struct that includes separate fields for hash and signature algorithms.  That's not how NSS operates, it just gloms the two values together into a single value.

We should deprecate that API and allow for the signature schemes to be configured directly.  I have a patch ready, which I built as part of another bug, but I think that this is separable enough.

https://nss-dev.phacility.com/D41
https://hg.mozilla.org/projects/nss/rev/803319e95365ea37b901f853c8f14f26c1a0ceca
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.28
See Also: → 1317857
You need to log in before you can comment on or make changes to this bug.