diff options
| author | David Benjamin <davidben@chromium.org> | 2014-11-12 07:47:50 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-11-19 01:18:36 +0300 |
| commit | c20febe17747674ede52072e85fb944cd55637a6 (patch) | |
| tree | 4643338c1bb11a85c62cdfaad3eed463829b7d27 /include/openssl/evp.h | |
| parent | ca6c82643ae885f94acff27ddd93bfb73fda3af5 (diff) | |
Add EVP_PKEY_supports_digest.
This is intended for TLS client auth with Windows CAPI- and CNG-backed keys
which implement sign over sign_raw and do not support all hash functions. Only
plumbed through RSA for now.
Change-Id: Ica42e7fb026840f817a169da9372dda226f7d6fd
Reviewed-on: https://boringssl-review.googlesource.com/2250
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'include/openssl/evp.h')
| -rw-r--r-- | include/openssl/evp.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/openssl/evp.h b/include/openssl/evp.h index 9e4920af..a760386e 100644 --- a/include/openssl/evp.h +++ b/include/openssl/evp.h @@ -94,6 +94,12 @@ OPENSSL_EXPORT void EVP_PKEY_free(EVP_PKEY *pkey); * an error to attempt to duplicate, export, or compare an opaque key. */ OPENSSL_EXPORT int EVP_PKEY_is_opaque(const EVP_PKEY *pkey); +/* EVP_PKEY_supports_digest returns one if |pkey| supports digests of + * type |md|. This is intended for use with EVP_PKEYs backing custom + * implementations which can't sign all digests. */ +OPENSSL_EXPORT int EVP_PKEY_supports_digest(const EVP_PKEY *pkey, + const EVP_MD *md); + /* EVP_PKEY_cmp compares |a| and |b| and returns one if they are equal, zero if * not and a negative number on error. * |