cloudflare / cloudflare/tls-tris
Support for RSASSA-PSS public keys in certificates
Open
- Dominant language
- Go
- Stars
- 300
- Forks
- 52
- PR merge metrics
- No merged PRs in 30d
Description
In order to advertise RSASSA-PSS in the supported_algorithms extension, the client (or server in case of mutual auth) must support processing of certificates containing a RSASSA-PSS public key. This is at least the case until at least draft -21.
Currently the server already supports RSASSA-PSS signatures in *handshake messages*, the client functionality is added in #35 (see that PR for more details).
Support for PSS *signatures* in TLS 1.2 is proposed here: https://go-review.googlesource.com/q/topic:sigalgs-pss
Contributor guide
Assessment
This issue has not been assessed yet.