From 6b7be581e52761b2a0dc5dcf35214ff813b9f9f0 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Fri, 6 May 2011 13:00:07 +0000 Subject: Continuing TLS v1.2 support: add support for server parsing of signature algorithms extension and correct signature format for server key exchange. All ciphersuites should now work on the server but no client support and no client certificate support yet. --- ssl/d1_srvr.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ssl/d1_srvr.c') diff --git a/ssl/d1_srvr.c b/ssl/d1_srvr.c index f6d72f5fa6..2d63199dd6 100644 --- a/ssl/d1_srvr.c +++ b/ssl/d1_srvr.c @@ -1139,7 +1139,7 @@ int dtls1_send_server_key_exchange(SSL *s) if (!(s->s3->tmp.new_cipher->algorithm_auth & SSL_aNULL) && !(s->s3->tmp.new_cipher->algorithm_mkey & SSL_kPSK)) { - if ((pkey=ssl_get_sign_pkey(s,s->s3->tmp.new_cipher)) + if ((pkey=ssl_get_sign_pkey(s,s->s3->tmp.new_cipher, NULL)) == NULL) { al=SSL_AD_DECODE_ERROR; -- cgit v1.2.3