Support for client-signature-algorithms

[mohitvaid]

@icraggs We are using syslog-ng for MQTT communication. Which internally uses paho.mqtt.c

As part of our NIAP support we are supposed to restrict certain TLS specific parameters, likewise:

• ciphers,
• client signature algorithms/ signature algorithms,
• ecdh curves

Based on syslog-ng/syslog-ng#4000, syslog-ng team has made changes for their general TLS support but for MQTT flow they are unable to as paho library lacks support for the signature algorithms.

Can this change be accommodated?

[mohitvaid]

@icraggs can you please take a look at this discussion?

[icraggs]

Sorry I hadn't really been aware of this discussion facility. It seems the best way to support this would be to expose the OpenSSL context for configuration by the application as suggested in the linked discussion. The request actually seems to be to restrict some algorithms.