Re: how to use gnutls_privkey_import_ext

[Nikos Mavrogiannopoulos]

On 06/10/2012 07:36 PM, Carolin Latze wrote:

> I am sorry, but this still causes me some troubles.
> 
> As far as I understand it, the hash in PKCS#1 is:
> 
> bytes 00 - 14: algorithm identifier + some more bytes
> bytes 15 - 20: the hash
> So I thought it might be sufficient do define a new gnutls_datum_t vdata
> with
> vdata.data = &raw_data->data[15]
> vdata.size = raw_data->size-15


Why do you do that? You're not supposed to interpret that data, just
sign it using raw RSA. You should treat it the same way you treated the
MD5+SHA1 combo in TLS 1.0.

regards,
Nikos