[SCM] GNU gnutls branch, gnutls_2_10_x, updated. gnutls_2_10_0-10-gb1b3ea3

[Nikos Mavrogiannopoulos]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GNU gnutls".

http://git.savannah.gnu.org/cgit/gnutls.git/commit/?id=b1b3ea3c38383282a381aff5fe17aa42fbeeab05

The branch, gnutls_2_10_x has been updated
       via  b1b3ea3c38383282a381aff5fe17aa42fbeeab05 (commit)
      from  301635adbc64b76c3bf998ba3a471750c49222c8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b1b3ea3c38383282a381aff5fe17aa42fbeeab05
Author: Nikos Mavrogiannopoulos <address@hidden>
Date:   Wed Jul 21 09:17:34 2010 +0200

    Added SIG_RSA_MD5_OID as an indicator of RSA. Some microsoft products were 
using it. Reported by Mads Kiilerich.

-----------------------------------------------------------------------

Summary of changes:
 NEWS                    |    3 +++
 lib/gnutls_algorithms.c |    2 ++
 2 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/NEWS b/NEWS
index 3aca5aa..0af5b2c 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,9 @@ See the end for copying conditions.
 
 * Version 2.10.1 (unreleased)
 
+** libgnutls: Added support for broken certificates that indicate RSA
+with strange OIDs.
+
 ** gnutls-cli: Allow verification using V1 CAs.
 
 ** libgnutls: Correctly deinitialize crypto API functions to prevent
diff --git a/lib/gnutls_algorithms.c b/lib/gnutls_algorithms.c
index 4c4c357..bdeba0a 100644
--- a/lib/gnutls_algorithms.c
+++ b/lib/gnutls_algorithms.c
@@ -2122,6 +2122,8 @@ typedef struct gnutls_pk_entry gnutls_pk_entry;
 
 static const gnutls_pk_entry pk_algorithms[] = {
   {"RSA", PK_PKIX1_RSA_OID, GNUTLS_PK_RSA},
+  {"RSA (X.509)", PK_X509_RSA_OID, GNUTLS_PK_RSA}, /* some certificates use 
this OID for RSA */
+  {"RSA (MD5)", SIG_RSA_MD5_OID, GNUTLS_PK_RSA}, /* some other broken 
certificates set RSA with MD5 as an indicator of RSA */
   {"DSA", PK_DSA_OID, GNUTLS_PK_DSA},
   {"GOST R 34.10-2001", PK_GOST_R3410_2001_OID, 0},
   {"GOST R 34.10-94", PK_GOST_R3410_94_OID, 0},


hooks/post-receive
-- 
GNU gnutls