| commit | 371192e8c9550545c9dbd23acf8353d709dff4ab | [log] [tgz] |
|---|---|---|
| author | Costin Manolache <costin@google.com> | Tue Mar 02 13:47:01 2010 -0800 |
| committer | Costin Manolache <costin@google.com> | Fri Mar 05 09:51:26 2010 -0800 |
| tree | 8efc7435d895044c0e7f0239cb285ca3df9807cb | |
| parent | c9b3aeb659ac420bdc3d3c550423ab1fec5fde4c [diff] |
Fix server side SSLEngine ServerKeyExchange signature. Code using SSLEngine for non-blocking SSL can't talk with openssl as a client, since the signature is computed on different content (and openssl checks it, unlike java). The fix is to use strip the 0x00 prefix when signing - like it is done when generating the message, refactored both to use a common method. We also include the length in the signature, it was also missing.