You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Haven't tested it with other algorithms, but attempting to generate a Digest-type signature using secp256r1/P-256 (ECDSA) key using SHA-1 hashing algorithm
OpenSSL::PKey::PKeyError: SHA1WITHEC Signature not available
sign at org/jruby/ext/openssl/PKey.java:223
Cursory investigation brings me to Bouncy Castle, where SHA1WITHECDSA algo does exists.
I have cobbled up a hacky patch to pass ECDSA in around here when PKeyEC instance is in play. It does work (both sign/verify output proper values, cross checked with CRuby's OpenSSL), but am not sure about architectural validity of this approach.
The text was updated successfully, but these errors were encountered:
Hey Aleks, that makes sense. The EC support wasn't completely polished.
But this part should return"ECDSA" ... as you already figured. Please fire up a PR.
@kares As the 25972fd commit only contains test but not an implementation, and causes some CI failures, I think this issue in itself isn't fully resolved?
Haven't tested it with other algorithms, but attempting to generate a Digest-type signature using
secp256r1
/P-256
(ECDSA
) key usingSHA-1
hashing algorithmfails with
Cursory investigation brings me to Bouncy Castle, where
SHA1WITHECDSA
algo does exists.I have cobbled up a hacky patch to pass
ECDSA
in around here whenPKeyEC
instance is in play. It does work (both sign/verify output proper values, cross checked with CRuby's OpenSSL), but am not sure about architectural validity of this approach.The text was updated successfully, but these errors were encountered: