[gnutls-devel] GnuTLS | server auth: disable TLS 1.3 if no signature algorithm is usable (!987)

[Development of GNU's TLS library]

Daiki Ueno commented on a discussion on lib/auth.c: https://gitlab.com/gnutls/gnutls/merge_requests/987#note_172363337

>  		if (c != NULL && c->ncerts != 0) {
>  			for (i = 0; i < c->ncerts; i++) {
>  				key_usage = get_key_usage(session, c->certs[i].cert_list[0].pubkey);
> -				if (key_usage == 0 || (key_usage & GNUTLS_KEY_DIGITAL_SIGNATURE)) {
> +				if ((key_usage == 0 || (key_usage & GNUTLS_KEY_DIGITAL_SIGNATURE))) {

Thanks, fixed.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/987#note_172363337
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190520/c45dd59d/attachment-0001.html>