diff options
| author | Werner Koch <[email protected]> | 2022-10-28 13:21:26 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2022-10-28 13:21:26 +0000 |
| commit | aa397fdcdb219e45c286ddc72382cd78214d4f22 (patch) | |
| tree | ae389ce7548b62e384ea5795ace2aef6f6deb487 | |
| parent | gpgsm: New compatibility flag "allow-ecc-encr". (diff) | |
| download | gnupg-aa397fdcdb219e45c286ddc72382cd78214d4f22.tar.gz gnupg-aa397fdcdb219e45c286ddc72382cd78214d4f22.zip | |
gpgsm: Also announce AES256-CBC in signatures.
* sm/sign.c (gpgsm_sign): Add new capability.
--
It might be better to have this. No concrete bug report, though.
| -rw-r--r-- | sm/sign.c | 17 |
1 files changed, 10 insertions, 7 deletions
@@ -644,13 +644,16 @@ gpgsm_sign (ctrl_t ctrl, certlist_t signerlist, } /* We need to write at least a minimal list of our capabilities to - try to convince some MUAs to use 3DES and not the crippled - RC2. Our list is: - - aes128-CBC - des-EDE3-CBC - */ - err = ksba_cms_add_smime_capability (cms, "2.16.840.1.101.3.4.1.2", NULL, 0); + * try to convince some MUAs to use 3DES and not the crippled + * RC2. Our list is: + * + * aes256-CBC + * aes128-CBC + * des-EDE3-CBC + */ + err = ksba_cms_add_smime_capability (cms, "2.16.840.1.101.3.4.1.42", NULL,0); + if (!err) + err = ksba_cms_add_smime_capability (cms, "2.16.840.1.101.3.4.1.2", NULL,0); if (!err) err = ksba_cms_add_smime_capability (cms, "1.2.840.113549.3.7", NULL, 0); if (err) |