From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Fri, 17 Aug 2012 13:15:08 +0000 (+0200)
Subject: When selecting a session signature algorithm consider the enabled.
X-Git-Tag: gnutls_3_1_1~43
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5791f17c206e83baf6744151f53ad542c75de3be;p=thirdparty%2Fgnutls.git

When selecting a session signature algorithm consider the enabled.
---

diff --git a/lib/ext/signature.c b/lib/ext/signature.c
index 47724da4e8..a9756107c7 100644
--- a/lib/ext/signature.c
+++ b/lib/ext/signature.c
@@ -275,6 +275,9 @@ _gnutls_session_get_sign_algo (gnutls_session_t session, gnutls_pcert_st* cert)
           if (_gnutls_pubkey_compatible_with_sig(cert->pubkey, ver, priv->sign_algorithms[i]) < 0)
             continue;
 
+          if (_gnutls_session_sign_algo_enabled(session, priv->sign_algorithms[i]) < 0)
+            continue;
+
           return priv->sign_algorithms[i];
         }
     }