提交 c963df82 编写于 作者: X xuelei

8136442: Don't tie Certificate signature algorithms to ciphersuites

Reviewed-by: mullan
上级 2c57a307
...@@ -1233,8 +1233,8 @@ final class ServerHandshaker extends Handshaker { ...@@ -1233,8 +1233,8 @@ final class ServerHandshaker extends Handshaker {
} }
} }
// need EC cert signed using EC // need EC cert
if (setupPrivateKeyAndChain("EC_EC") == false) { if (setupPrivateKeyAndChain("EC") == false) {
return false; return false;
} }
if (setupEphemeralECDHKeys() == false) { if (setupEphemeralECDHKeys() == false) {
...@@ -1242,15 +1242,15 @@ final class ServerHandshaker extends Handshaker { ...@@ -1242,15 +1242,15 @@ final class ServerHandshaker extends Handshaker {
} }
break; break;
case K_ECDH_RSA: case K_ECDH_RSA:
// need EC cert signed using RSA // need EC cert
if (setupPrivateKeyAndChain("EC_RSA") == false) { if (setupPrivateKeyAndChain("EC") == false) {
return false; return false;
} }
setupStaticECDHKeys(); setupStaticECDHKeys();
break; break;
case K_ECDH_ECDSA: case K_ECDH_ECDSA:
// need EC cert signed using EC // need EC cert
if (setupPrivateKeyAndChain("EC_EC") == false) { if (setupPrivateKeyAndChain("EC") == false) {
return false; return false;
} }
setupStaticECDHKeys(); setupStaticECDHKeys();
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册