Changes to allow ECDH-DSA with client mode certificates.

diff --git a/lib/gnutls_pubkey.c b/lib/gnutls_pubkey.c
index 7769b7839ac6916d809cbbb6ed29609b2b76acf4..227036d7448e66c53b14c1ae620c79a80c0037c8 100644 (file)
--- a/lib/gnutls_pubkey.c
+++ b/lib/gnutls_pubkey.c
@@ -1197,7 +1197,7 @@ gnutls_pubkey_get_verify_algorithm (gnutls_pubkey_t key,
 int _gnutls_pubkey_compatible_with_sig(gnutls_pubkey_t pubkey, gnutls_protocol_t ver, 
   gnutls_sign_algorithm_t sign)
 {
-  if (pubkey->pk_algorithm == GNUTLS_PK_DSA || pubkey->pk_algorithm == GNUTLS_PK_ECC)
+  if (pubkey->pk_algorithm == GNUTLS_PK_DSA)
     { /* override */
       int hash_algo = _gnutls_dsa_q_to_hash (pubkey->pk_algorithm, &pubkey->params);
 

diff --git a/lib/gnutls_sig.c b/lib/gnutls_sig.c
index 433116599846272e6ce39f0511b5d1c2b736827c..88d53eaa469f715cc909b4e9bdebab7777c01539 100644 (file)
--- a/lib/gnutls_sig.c
+++ b/lib/gnutls_sig.c
@@ -724,6 +724,7 @@ _gnutls_handshake_sign_cert_vrfy (gnutls_session_t session,
       dconcat.size = 36;
       break;
     case GNUTLS_PK_DSA:
+    case GNUTLS_PK_ECC:
 
       dconcat.data = &concat[16];
       dconcat.size = 20;