Don't use an RSA-PSS cert for RSA key exchange
authorMatt Caswell <matt@openssl.org>
Mon, 3 Sep 2018 15:12:34 +0000 (16:12 +0100)
committerMatt Caswell <matt@openssl.org>
Tue, 4 Sep 2018 10:28:01 +0000 (11:28 +0100)
commitb8fef8ee929a8775262cb4371f62c35f7058dbed
tree98b1464f780995c9e74c9a4e70eae179d546eeae
parent8614a4eb4ae8e38c3f5064113eb571aa8ca6b272
Don't use an RSA-PSS cert for RSA key exchange

If we have selected a ciphersuite using RSA key exchange then we must
not attempt to use an RSA-PSS cert for that.

Fixes #7059

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7099)
ssl/t1_lib.c