certmonger

#301 Experimental support for Post Quantum keys
Opened by rcritten. Modified
rcritten/certmonger pq  into  master

Merge

Add some experimental support for ML-DSA certificates in both NSS and OpenSSL. This includes some basic key and csr generation tests.

This includes a PR to modernize OpenSSL support to rely more on EVP_PKEY instead of deprecated key-specific types.

rebased onto 5e53a204062a78f7e5c9311bfac3d392d23d5134

6 new commits added

  • Allow requesting a ML-DSA key using a strength
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

6 new commits added

  • Allow requesting a ML-DSA key using a strength
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls
Metadata
None
No Tags
Changes Summary 40
+96 -1
file changed
configure.ac
+10 -8
file changed
src/Makefile.am
+1 -0
file changed
src/certmonger.conf.5.in
+1 -1
file changed
src/certsave-o.c
+16 -4
file changed
src/csrgen-o.c
+34 -0
file changed
src/getcert.c
+51 -1
file changed
src/keygen-n.c
+138 -57
file changed
src/keygen-o.c
+7 -0
file changed
src/keyiread-n.c
+55 -1
file changed
src/keyiread-o.c
+31 -0
file changed
src/keyiread.c
+29 -16
file changed
src/local.c
+28 -0
file changed
src/log.c
+1 -0
file changed
src/log.h
+12 -31
file changed
src/pkcs7.c
+51 -0
file changed
src/prefs-n.c
+2 -0
file changed
src/prefs-n.h
+33 -0
file changed
src/prefs-o.c
+1 -0
file changed
src/prefs-o.h
+14 -0
file changed
src/prefs.c
+6 -6
file changed
src/scep.c
+36 -17
file changed
src/scepgen-n.c
+147 -0
file changed
src/store-files.c
+5 -0
file changed
src/store-int.h
+1 -0
file changed
src/store.h
+11 -0
file changed
src/submit-e.c
+63 -25
file changed
src/submit-n.c
+58 -21
file changed
src/tdbush.c
+7
file added
tests/001-keyiread-mldsa/expected.out
+36
file added
tests/001-keyiread-mldsa/run.sh
+27
file added
tests/002-keygen-mldsa/expected.out
+5
file added
tests/002-keygen-mldsa/prequal.sh
+84
file added
tests/002-keygen-mldsa/run.sh
+7
file added
tests/003-csrgen-mldsa/expected.out
+52
file added
tests/003-csrgen-mldsa/run.sh
+4 -4
file changed
tests/028-dbus/expected.out
+965
file added
tests/028-dbus/expected.out.nodsa.withmldsa
+965
file added
tests/028-dbus/expected.out.nomldsa
+21 -0
file changed
tests/Makefile.am
+17 -0
file changed
tests/tools/keyiread.c
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.