summaryrefslogtreecommitdiff
path: root/usr.sbin
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2024-07-08 16:11:48 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2024-07-08 16:11:48 +0000
commit88a1fef9450c96ce0f3e436763ba08cda135823b (patch)
tree0cc246d72999f03cad1490a3b89589f2ebe36a2b /usr.sbin
parentd456e21d87556d47c96de2a78c701bddf1a7c1e1 (diff)
x509_pubkey_get_ski() should support non-rsa keys
for now add an XXX reminder. Pointed out by job a while back
Diffstat (limited to 'usr.sbin')
-rw-r--r--usr.sbin/rpki-client/x509.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/usr.sbin/rpki-client/x509.c b/usr.sbin/rpki-client/x509.c
index 049dd78ea9e..d63cb56b8ec 100644
--- a/usr.sbin/rpki-client/x509.c
+++ b/usr.sbin/rpki-client/x509.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509.c,v 1.99 2024/06/10 12:44:06 tb Exp $ */
+/* $OpenBSD: x509.c,v 1.100 2024/07/08 16:11:47 tb Exp $ */
/*
* Copyright (c) 2022 Theo Buehler <tb@openbsd.org>
* Copyright (c) 2021 Claudio Jeker <claudio@openbsd.org>
@@ -482,6 +482,7 @@ x509_pubkey_get_ski(X509_PUBKEY *pubkey, const char *fn)
return NULL;
}
+ /* XXX - should allow other keys as well. */
if ((nid = OBJ_obj2nid(obj)) != NID_rsaEncryption) {
warnx("%s: RFC 7935: wrong signature algorithm %s, want %s",
fn, nid2str(nid), LN_rsaEncryption);