Re: GnuTLS | Client Authentication broken with Java 17.0.17+ (and recent versions of Java) (#1842)

Read-only notification of GnuTLS library development activities <[email protected]> Fri, 17 Apr 2026 03:43:38 +0000

Newsgroups	gmane.comp.encryption.gpg.gnutls.devel
Message-ID	<[email protected]>



Romain Tartière commented: https://gitlab.com/gnutls/gnutls/-/work_items/1842#note_3259697071


Tracing execution, in [parse_cert_extension()](https://gitlab.com/gnutls/gnutls/-/blob/master/lib/tls13/certificate_request.c#L115) the following algorithms are added to `ctx->pk_algos`:

* 4 (`GNUTLS_PK_ECDSA`);
* 7 (`GNUTLS_PK_EDDSA_ED25519`);
* 12 (`GNUTLS_PK_EDDSA_ED448`);
* 6 (`GNUTLS_PK_RSA_PSS`).

Algorithm 1 (`GNUTLS_PK_RSA`, present in `cert_pk`) is not added to this list, which seems to be the root cause of the issue.  I opened !2095 to fix it.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1842#note_3259697071
You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/sent_notifications/4-10i2g6ao71hutk5ujfkjcayfq-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
Gnutls-devel mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-devel