DOKK / manpages / debian 12 / gnutls-doc / gnutls_privkey_sign_hash2.3.en
gnutls_privkey_sign_hash2(3) gnutls gnutls_privkey_sign_hash2(3)

gnutls_privkey_sign_hash2 - API function

#include <gnutls/abstract.h>

int gnutls_privkey_sign_hash2(gnutls_privkey_t signer, gnutls_sign_algorithm_t algo, unsigned int flags, const gnutls_datum_t * hash_data, gnutls_datum_t * signature);

Holds the signer's key
The signature algorithm used
Zero or one of gnutls_privkey_flags_t
holds the data to be signed
will contain newly allocated signature

This function will sign the given hashed data using the specified signature algorithm. This function is an enhancement of gnutls_privkey_sign_hash(), as it allows utilizing a alternative signature algorithm where possible (e.g, use an RSA key with RSA-PSS).

The flags may be GNUTLS_PRIVKEY_SIGN_FLAG_TLS1_RSA. In that case this function will ignore hash_algo and perform a raw PKCS1 signature. Note that this flag is supported since 3.6.9.

Note also that, not all algorithm support signing already hashed data. When signing with Ed25519, gnutls_privkey_sign_data2() should be used instead.

On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.

3.6.0

Report bugs to <bugs@gnutls.org>.
Home page: https://www.gnutls.org

Copyright © 2001- Free Software Foundation, Inc., and others.
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

3.7.9 gnutls