summaryrefslogtreecommitdiff
path: root/lib/gnutls_pk.c
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2011-02-09 23:19:19 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2011-02-09 23:29:49 +0100
commit599ee2a717b238d7367075139bd4a13ce22383c5 (patch)
tree5be6849281ab4a9a94d4ca0175433dcbb717b3a6 /lib/gnutls_pk.c
parente2780fb07b38af49807b725421f9aec97f3f8b99 (diff)
downloadgnutls-599ee2a717b238d7367075139bd4a13ce22383c5.tar.gz
In TLS 1.2 under DSS use the hash algorithm required by DSS.
Diffstat (limited to 'lib/gnutls_pk.c')
-rw-r--r--lib/gnutls_pk.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/gnutls_pk.c b/lib/gnutls_pk.c
index ee4fb03779..9fa032601b 100644
--- a/lib/gnutls_pk.c
+++ b/lib/gnutls_pk.c
@@ -501,8 +501,8 @@ _gnutls_dsa_verify (const gnutls_datum_t * vdata,
pk_params.params[i] = params[i];
pk_params.params_nr = params_len;
- if (vdata->size > 20)
- { /* SHA1 or better only */
+ if (vdata->size < 20)
+ { /* SHA1 or better only */
gnutls_assert ();
return GNUTLS_E_PK_SIG_VERIFY_FAILED;
}