no need to check s->server as default_nid is never used for TLS 1.2 client authentication
(backport from HEAD)
This commit is contained in:
parent
04c32cddaa
commit
7531dd18dc
@ -3519,7 +3519,7 @@ int tls1_check_chain(SSL *s, X509 *x, EVP_PKEY *pk, STACK_OF(X509) *chain,
|
||||
* have set preferred signature algorithms check we support
|
||||
* sha1.
|
||||
*/
|
||||
if (s->server && default_nid > 0 && c->conf_sigalgs)
|
||||
if (default_nid > 0 && c->conf_sigalgs)
|
||||
{
|
||||
size_t j;
|
||||
const unsigned char *p = c->conf_sigalgs;
|
||||
|
Loading…
x
Reference in New Issue
Block a user