diff options
Diffstat (limited to 'lib/ext/signature.c')
-rw-r--r-- | lib/ext/signature.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lib/ext/signature.c b/lib/ext/signature.c index 8dba4c6ca7..3f3652f51e 100644 --- a/lib/ext/signature.c +++ b/lib/ext/signature.c @@ -97,6 +97,12 @@ _gnutls_sign_algorithm_write_params(gnutls_session_t session, if (prev && prev->id[0] == aid->id[0] && prev->id[1] == aid->id[1]) continue; + /* Ignore non-GOST sign types for CertReq */ + if (session->security_parameters.cs && + _gnutls_kx_is_vko_gost(session->security_parameters.cs->kx_algorithm) && + !_sign_is_gost(session->internals.priorities->sigalg.entry[i])) + continue; + _gnutls_handshake_log ("EXT[%p]: sent signature algo (%d.%d) %s\n", session, (int)aid->id[0], (int)aid->id[1], |