Don't send signature algorithms when client_version is below TLS 1.2.

[openssl.git] / ssl / t1_lib.c

diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
index 0a66c09cb223129f01ae9f7cadcbdfa14b0b1900..6363348d54b4e7fedbfea0ae2e74fb1dbe4df13d 100644 (file)
--- a/ssl/t1_lib.c
+++ b/ssl/t1_lib.c
@@ -1331,7 +1331,7 @@ unsigned char *ssl_add_clienthello_tlsext(SSL *s, unsigned char *buf,
     }
  skip_ext:
 
     }
  skip_ext:
 

-    if (SSL_USE_SIGALGS(s)) {
+    if (SSL_CLIENT_USE_SIGALGS(s)) {

         size_t salglen;
         const unsigned char *salg;
         unsigned char *etmp;
         size_t salglen;
         const unsigned char *salg;
         unsigned char *etmp;