[tpm2] Re: {External} Re: OpenSSL 3 and tpm2 provider... / openssl cms
Petr Gotthard <petr.gotthard at centrum.cz> Wed, 27 Apr 2022 16:46:54 +0200
| Newsgroups | dev.linux.lists.tpm2 |
|---|---|
| Message-ID | <[email protected]> |
>Yeah. What I wrote was apparently true for RSA keys only. The EC keys do not correctly supply the hash algorithm. That is a bug that will be fixed in the coming days: https://github.com/tpm2-software/tpm2-openssl/issues/34 The bug has been fixed in the latest master branch. A new test shows openssl cms -sign with an EC key without the -md parameter. https://github.com/tpm2-software/tpm2-openssl/blob/master/test/ec_createak_x509_cms.sh regards, Petr