verifyRsaPssSignature

private fnbool verifyRsaPssSignature(X509Certificate cert, PublicKey publicKey)

Verifies an RSASSA-PSS certificate signature (RFC 4055).

The PSS parameters are read from the certificate's signatureAlgorithm parameters; defaults are SHA-1, MGF1 with SHA-1, and a 20-byte salt. Any parameter combination this library cannot honor (unknown hash, non-MGF1 mask, MGF1 hash differing from the message hash, or a trailer field other than 1) fails closed.

Parameters

certThe certificate whose signature to verify.
publicKeyThe public key to use for verification.

Returns

True if the signature is valid.