[gnutls-devel] GnuTLS | RFC7250 Raw public keys (!650)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos started a new discussion on lib/auth/cert.c:

> +			const gnutls_certificate_credentials_t cred,
> +			const gnutls_pk_algorithm_t* pk_algos,
> +			int pk_algos_length, int* indx)
> +{
> +	unsigned i;
> +	gnutls_pk_algorithm_t pk;
> +
> +	*indx = -1;
> +
> +	// Traverse all certificate credentials
> +	for (i = 0; i < cred->ncerts; i++) {
> +		/* We know that our list length will be 1, therefore we can
> +		 * ignore the rest.
> +		 */
> +		if (cred->certs[i].cert_list_length == 1) {
> +			// If the *_SIGN algorithm and cert type match the cert is our cert!

The comment here doesn't seem to match what is going on further. There is no check for signature algorithms.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/650#note_118714453
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181120/25ab0a24/attachment.html>