Re: [strongSwan] TPM 2.0 - unknown hash algorithm not supported by TPM

2022-05-24 Thread Tobias Brunner
Hi, And the scheme detected is SIGN_RSA_EMSA_PKCS1_NULL 0x1 You can't use IKEv1 with TPM 2.0 because the latter doesn't support the former's legacy signature schemes. Regards, Tobias

[strongSwan] TPM 2.0 - unknown hash algorithm not supported by TPM

2022-05-24 Thread rodolphe.averty
Hello, i try to use TPM2.0 to store my private key. This key exists and have to be stored into the TPM. So with tpm2-tools i have the sequence : >> tpm2_createprimary -Q -G rsa2048 -g sha256 -C o -c parent.ctx >> tpm2_import -G rsa2048:rsassa-sha256 -g sha256 -i ${PRIVATE_PEM} -C

[strongSwan] TPM 2.0 - unknown hash algorithm not supported by TPM

2022-05-24 Thread rodolphe.averty
Hello, i try to use TPM2.0 to store my private key. This key exists and have to be stored into the TPM. So with tpm2-tools i have the sequence : >> tpm2_createprimary -Q -G rsa2048 -g sha256 -C o -c parent.ctx >> tpm2_import -G rsa2048:rsassa-sha256 -g sha256 -i ${PRIVATE_PEM} -C