Add check for RSA key pair modulus & public exponent
authorjob <job@openbsd.org>
Mon, 6 Mar 2023 16:04:52 +0000 (16:04 +0000)
committerjob <job@openbsd.org>
Mon, 6 Mar 2023 16:04:52 +0000 (16:04 +0000)
commitae36eebee81e799b401ac592c29f7ae82ed9c768
tree1b989282c97070c1c1e4d17874d695ec2bdec15d
parent8b1f33bcd28e9d8836380c433b0048dd1cf91724
Add check for RSA key pair modulus & public exponent

Both the SPKI inside a CA's .cer TBS section and Signers wrapped in CMS
must be RSA, with mod 2048 & (e) 0x10001

OK tb@
usr.sbin/rpki-client/cert.c
usr.sbin/rpki-client/cms.c
usr.sbin/rpki-client/extern.h
usr.sbin/rpki-client/rpki-client.8
usr.sbin/rpki-client/validate.c