Honour mandatory digest on private key in has_usable_cert()
authorDavid Woodhouse <dwmw2@infradead.org>
Tue, 16 Oct 2018 14:59:46 +0000 (07:59 -0700)
committerNicola Tuveri <nic.tuv@gmail.com>
Sat, 10 Nov 2018 01:23:14 +0000 (03:23 +0200)
commit2d263a4a73f852005b16359873475d48755999ad
treeb5fd08c6e5ded6f82e1f98f280e21edce1798bc8
parenteb7eb1378cd15c4652884b3701d4c0ef27b5b8a6
Honour mandatory digest on private key in has_usable_cert()

If the private key says it can only support one specific digest, then
don't ask it to perform a different one.

Fixes: #7348
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7408)
ssl/t1_lib.c