tree 920c3838e3e04d5f0cdaf465186921803fba1e39
parent 2c1c9fa5cbb123555f38947af3c3ad3f29132dda
author David Benjamin <davidben@google.com> 1614235036 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1615918044 +0000

Implement rsa_pkcs1_sha256_legacy.

See draft-davidben-tls13-pkcs1-00. The code point is disabled by default
and must be configured in SSL_set_verify_algorithm_prefs and
SSL_set_signing_algorithm_prefs. It is also only defined for TLS 1.3
client certificates and otherwise ignored.

This required reworking the tests a bit since this is the first
signature algorithm that's disabled by default, and the first algorithm
that behaves differently between client and server.

Change-Id: Iac4aa96a4963cbc33688c252e958a572c5c3b511
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/46187
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>