Clarified the purpose of the spki params related functions

_gnutls_privkey_get_sign_params was renamed to _gnutls_privkey_get_spki_params,
_gnutls_privkey_update_sign_params to _gnutls_privkey_update_spki_params,
and the dig entry of gnutls_x509_spki_st was renamed to rsa_pss_dig.

The reason is that there could be a confusion on the purpose of
the 'dig' entry, as it could be assumed to be the signature's hash
algorithm in the general case. That could not be because the SPKI
parameters do not contain it for any other algorithm than RSA-PSS.
As such, make a logical separation from SPKI reading functions
with the signature reading functions and try to use the
gnutls_sign_entry_st when signature information is required.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/lib/x509/x509.c b/lib/x509/x509.c
index f779cd97b4..073e7fcdbb 100644
--- a/lib/x509/x509.c
+++ b/lib/x509/x509.c
@@ -1605,13 +1605,13 @@ gnutls_x509_crt_get_pk_algorithm2(gnutls_x509_crt_t cert,
 
 		spki->pk = result;
 
-		result = _gnutls_x509_crt_read_sign_params(cert, &params);
+		result = _gnutls_x509_crt_read_spki_params(cert, &params);
 		if (result < 0) {
 			gnutls_assert();
 			return result;
 		}
 
-		spki->dig = params.dig;
+		spki->rsa_pss_dig = params.rsa_pss_dig;
 		spki->salt_size = params.salt_size;
 
 		return spki->pk;