提交 b2141841 编写于 作者: D Dr. Stephen Henson

recognise X9.42 DH certificates on servers

上级 aa09c2c6
...@@ -348,7 +348,7 @@ int EVP_PKEY_set1_DH(EVP_PKEY *pkey, DH *key) ...@@ -348,7 +348,7 @@ int EVP_PKEY_set1_DH(EVP_PKEY *pkey, DH *key)
DH *EVP_PKEY_get1_DH(EVP_PKEY *pkey) DH *EVP_PKEY_get1_DH(EVP_PKEY *pkey)
{ {
if(pkey->type != EVP_PKEY_DH) { if(pkey->type != EVP_PKEY_DH && pkey->type != EVP_PKEY_DHX) {
EVPerr(EVP_F_EVP_PKEY_GET1_DH, EVP_R_EXPECTING_A_DH_KEY); EVPerr(EVP_F_EVP_PKEY_GET1_DH, EVP_R_EXPECTING_A_DH_KEY);
return NULL; return NULL;
} }
......
...@@ -524,7 +524,7 @@ int ssl_cert_type(X509 *x, EVP_PKEY *pkey) ...@@ -524,7 +524,7 @@ int ssl_cert_type(X509 *x, EVP_PKEY *pkey)
{ {
ret = SSL_PKEY_GOST01; ret = SSL_PKEY_GOST01;
} }
else if (x && i == EVP_PKEY_DH) else if (x && (i == EVP_PKEY_DH || i == EVP_PKEY_DHX))
{ {
/* For DH two cases: DH certificate signed with RSA and /* For DH two cases: DH certificate signed with RSA and
* DH certificate signed with DSA. * DH certificate signed with DSA.
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册