File 3251-Fix-public_key-pkix_sign-for-RSASSA-PSS-signature.patch of Package erlang
From 97c6cbc7eafe9ae0c8ed44c55f65bf159b334acc Mon Sep 17 00:00:00 2001
From: Sergey Stolyarov <sergei@regolit.com>
Date: Fri, 16 Jul 2021 09:36:30 +0700
Subject: [PATCH 1/3] Fix public_key:pkix_sign for RSASSA-PSS signature
---
lib/public_key/src/pubkey_cert.erl | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/public_key/src/pubkey_cert.erl b/lib/public_key/src/pubkey_cert.erl
index 66d37ebf96..5310785328 100644
--- a/lib/public_key/src/pubkey_cert.erl
+++ b/lib/public_key/src/pubkey_cert.erl
@@ -537,10 +537,10 @@ gen_test_certs(
x509_pkix_sign_types(#'SignatureAlgorithm'{algorithm = ?'id-RSASSA-PSS',
- parameters = #'RSASSA-PSS-params'{hashAlgorithm = #'HashAlgorithm'{algorithm = Alg}}}) ->
+ parameters = #'RSASSA-PSS-params'{saltLength = SaltLen, hashAlgorithm = #'HashAlgorithm'{algorithm = Alg}}}) ->
Hash = public_key:pkix_hash_type(Alg),
{Hash, rsa_pss_pss, [{rsa_padding, rsa_pkcs1_pss_padding},
- {rsa_pss_saltlen, -1},
+ {rsa_pss_saltlen, SaltLen},
{rsa_mgf1_md, Hash}]};
x509_pkix_sign_types(#'SignatureAlgorithm'{algorithm = Alg}) ->
{Hash, Sign} = public_key:pkix_sign_types(Alg),
--
2.26.2