GOST-compatible TLS authentication

diff --git a/tls/tlsauth.go b/tls/tlsauth.go
index bca76efc73514703fdb26b46c76a04411c343ca5..7d8bf23bbd056ef3dba8cb621119a9db18dd0934 100644 (file)
--- a/tls/tlsauth.go
+++ b/tls/tlsauth.go
@@ -31,6 +31,8 @@ import (
        "strconv"
        "strings"
 
+       "crypto/go.cypherpunks.ru/gogost/v5/gost3410"
+
        "go.cypherpunks.ru/ucspi"
        "go.stargrave.org/tofuproxy/caches"
        "go.stargrave.org/tofuproxy/fifos"
@@ -115,6 +117,9 @@ foreach sigScheme {%s} {
                if err != nil {
                        log.Fatalln(err)
                }
+               if gostPrv, ok := prv.(*gost3410.PrivateKey); ok {
+                       prv = &gost3410.PrivateKeyReverseDigestAndSignature{Prv: gostPrv}
+               }
                certs = append(certs, cert)
                tlsCerts = append(tlsCerts, &tls.Certificate{
                        Certificate: [][]byte{cert.Raw},