CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/12/18 05:27:58
Modified files:
usr.sbin/acme-client: acctproc.c
Log message:
acme-client: simplify elliptic curve signatures
We can get the correct size of the signature using EVP_PKEY_bits() which
uses the order instead of the (strictly speaking incorrect) degree. Grab
the (r, s) out of the ECDSA signature with ECDSA_SIG_get0_{r,s}(), which
is a saner interface than EVP_SIG_get0(). Finally, do the zero padding
using BN_bn2binpad() which is simpler than the currently rather fiddly
solution.
ok jsing
