]> git.ipfire.org Git - thirdparty/openssl.git/commit
Set the server sig algs before calling the session_secret_cb
authorMatt Caswell <matt@openssl.org>
Tue, 30 Apr 2024 13:31:26 +0000 (14:31 +0100)
committerTomas Mraz <tomas@openssl.org>
Mon, 6 May 2024 08:45:17 +0000 (10:45 +0200)
commit9919027446dd8bb0cf5aad7d9580c32782f2d253
tree31360aec3cde7c577c7c6eed8e4bbb35131a751c
parent5cb2a8fcc91b7b9bfffc70695df1bef29b495a60
Set the server sig algs before calling the session_secret_cb

Setting the server sig algs sets up the certificate "s3->tmp.valid_flags".
These are needed when calling ssl3_choose_cipher() which can happen
immediately after calling the session_secret_cb

Fixes #24213

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24309)

(cherry picked from commit 91c7ab27cebe4e6f6a6376e0a691736a2534fdd0)
ssl/statem/statem_srvr.c