[gnutls-devel] GnuTLS | Client Authentication broken with Java 17.0.17+ (and recent versions of Java) (#1842)

[Read-only notification of GnuTLS library development activities]

Romain Tartière commented: https://gitlab.com/gnutls/gnutls/-/work_items/1842#note_3259697071


Tracing execution, in [parse_cert_extension()](https://gitlab.com/gnutls/gnutls/-/blob/master/lib/tls13/certificate_request.c#L115) the following algorithms are added to `ctx->pk_algos`:

* 4 (`GNUTLS_PK_ECDSA`);
* 7 (`GNUTLS_PK_EDDSA_ED25519`);
* 12 (`GNUTLS_PK_EDDSA_ED448`);
* 6 (`GNUTLS_PK_RSA_PSS`).

Algorithm 1 (`GNUTLS_PK_RSA`, present in `cert_pk`) is not added to this list, which seems to be the root cause of the issue.  I opened !2095 to fix it.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/work_items/1842#note_3259697071
You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/sent_notifications/4-10i2g6ao71hutk5ujfkjcayfq-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20260417/77516f6b/attachment.html>