tree 07d9a57ff14178997ec87e047750ccc289c886a7
parent 117f86ef7152be47bd223ac602211a6beb2b1ab9
author David Benjamin <davidben@google.com> 1756830889 -0400
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1756962227 -0700

Make X509_verify X509_sign_ctx work with EVP_PKEY_RSA_PSS

Also test that putting an EVP_PKEY_RSA_PSS key in a certificate works...
mostly. X509_get0_pubkey on the resulting object should work but does
not yet. Later work will fix this.

This code also should be reworked to not depend on the big OID table,
but I've left that as a TODO for now.

Bug: 42290364, 384818542
Change-Id: Ifd727cb06ed6c9d1501ef2ef155f4b3c66c8d488
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/81782
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>