Honour mandatory digest on private key in has_usable_cert()
authorDavid Woodhouse <dwmw2@infradead.org>
Tue, 16 Oct 2018 14:59:46 +0000 (07:59 -0700)
committerNicola Tuveri <nic.tuv@gmail.com>
Sat, 24 Nov 2018 06:49:32 +0000 (08:49 +0200)
commit6aca8d1a5fb1fa8b359d0ddeab636174c09bf534
tree7b10fdcd9082f1b6b7ed427fad68318e1dc60658
parentabaa2311add6f19c712655b3d12fea979b774843
Honour mandatory digest on private key in has_usable_cert()

If the private key says it can only support one specific digest, then
don't ask it to perform a different one.

Fixes: #7348

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(cherry picked from commit 2d263a4a73f852005b16359873475d48755999ad)

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7609)
ssl/t1_lib.c