Commit 38e8f3cd authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Check validity, not just signing for all certificates 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2679)
parent faadddc9

ssl/ssl_lib.c

+2 −2
Original line number Diff line number Diff line
@@ -2768,8 +2768,8 @@ void ssl_set_masks(SSL *s) 
#endif



    rsa_enc = pvalid[SSL_PKEY_RSA] & CERT_PKEY_VALID;

    rsa_sign = pvalid[SSL_PKEY_RSA] & CERT_PKEY_SIGN;

    dsa_sign = pvalid[SSL_PKEY_DSA_SIGN] & CERT_PKEY_SIGN;

    rsa_sign = pvalid[SSL_PKEY_RSA] & CERT_PKEY_VALID;

    dsa_sign = pvalid[SSL_PKEY_DSA_SIGN] & CERT_PKEY_VALID;

#ifndef OPENSSL_NO_EC

    have_ecc_cert = pvalid[SSL_PKEY_ECC] & CERT_PKEY_VALID;

#endif