When selecting a session signature algorithm consider the enabled.

diff --git a/lib/ext/signature.c b/lib/ext/signature.c
index 47724da4e8131709bfd563708f55a451b3710f11..a9756107c7b9975429a0874ca56295ce417541fc 100644 (file)
--- a/lib/ext/signature.c
+++ b/lib/ext/signature.c
@@ -275,6 +275,9 @@ _gnutls_session_get_sign_algo (gnutls_session_t session, gnutls_pcert_st* cert)
           if (_gnutls_pubkey_compatible_with_sig(cert->pubkey, ver, priv->sign_algorithms[i]) < 0)
             continue;
 
+          if (_gnutls_session_sign_algo_enabled(session, priv->sign_algorithms[i]) < 0)
+            continue;
+
           return priv->sign_algorithms[i];
         }
     }