[gnutls-devel] GnuTLS | Fix TLS 1.3 handshake (!2095)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/2095 was reviewed by Daiki Ueno

--
  
Daiki Ueno started a new discussion on lib/tls13/certificate_request.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/2095#note_3259476712

 >  				continue;
 >  
 > +			gnutls_pk_algorithm_t algo = se->cert_pk || se->pk;

I don't think this is correct; `algo` always end up with either `GNUTLS_PK_RSA` (= 1) or `GNUTLS_PK_UNKNOWN` (= 0). See https://www.open-std.org/jtc1/sc22/WG14/www/docs/n1256.pdf#page=101 for the explanation.

Something like `se->cert_pk != GNUTLS_PK_UNKNOWN ? se->cert_pk : se->pk` should work.


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2095
You're receiving this email because of your account on gitlab.com. Unsubscribe from this thread: https://gitlab.com/-/sent_notifications/4-csb49qwaqd5aj9jw3rg7ehjp7-a84t7/unsubscribe | Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20260417/2f01ff0f/attachment-0001.html>