-
Notifications
You must be signed in to change notification settings - Fork 5.2k
Open
Labels
area-System.Net.Securitytracking-external-issueThe issue is caused by external problem (e.g. OS) - nothing we can do to fix it directlyThe issue is caused by external problem (e.g. OS) - nothing we can do to fix it directly
Milestone
Description
Attempts to use SLH-DSA-* certificates will cause SslStream handshake attempts to fail with
---- System.Security.Authentication.AuthenticationException : Authentication failed, see inner exception.
-------- Interop+OpenSsl+SslException : Using SSL certificate failed with OpenSSL error - unknown certificate type.
The reason seems to be because OpenSSL common provider does not advertise for the SLH-DSA-* signature schemes in its TLS-SIGALG capability
Since the Relevant RFC is still in draft state, this is not unexpected, but until OpenSSL introduces these, it is not going to be possible to use these certs with SslStream.
Metadata
Metadata
Assignees
Labels
area-System.Net.Securitytracking-external-issueThe issue is caused by external problem (e.g. OS) - nothing we can do to fix it directlyThe issue is caused by external problem (e.g. OS) - nothing we can do to fix it directly