fixes for http://tools.ietf.org/html/draft-mavrogiannopoulos-tls-dss-00

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 6f0ab8da2b3f552d3d63c31f18ea161dcec4d916..4ae970677653eb0542bf61178b63bb40b2348ef5 100644 (file)
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -934,6 +934,11 @@ _gnutls_dsa_q_to_hash (gnutls_pk_algorithm_t algo, const gnutls_pk_params_st* pa
       if (hash_len) *hash_len = 20;
       return GNUTLS_DIG_SHA1;
     }
+  else if (bits <= 192)
+    {
+      if (hash_len) *hash_len = 24;
+      return GNUTLS_DIG_SHA256;
+    }
   else if (bits <= 224)
     {
       if (hash_len) *hash_len = 28;