Allow switching a ciphersuite to DHE and ECDHE on a rehandshake

diff --git a/lib/auth/dhe.c b/lib/auth/dhe.c
index 16b16bd2a068db9a5b4ce0d6f079885d50558135..31b4bc115835ebfc18e9be6e73dfd77134959a7f 100644 (file)
--- a/lib/auth/dhe.c
+++ b/lib/auth/dhe.c
@@ -100,7 +100,7 @@ gen_dhe_server_kx(gnutls_session_t session, gnutls_buffer_st * data)
 
        if ((ret = _gnutls_auth_info_set(session, GNUTLS_CRD_CERTIFICATE,
                                         sizeof(cert_auth_info_st),
-                                        0)) < 0) {
+                                        1)) < 0) {
                gnutls_assert();
                return ret;
        }

diff --git a/lib/auth/ecdhe.c b/lib/auth/ecdhe.c
index 9376c0b67edff58d548741ea21568f2b7f04e4bd..60340dd97a305ef37725497092607295965eb319 100644 (file)
--- a/lib/auth/ecdhe.c
+++ b/lib/auth/ecdhe.c
@@ -385,7 +385,7 @@ gen_ecdhe_server_kx(gnutls_session_t session, gnutls_buffer_st * data)
 
        if ((ret = _gnutls_auth_info_set(session, GNUTLS_CRD_CERTIFICATE,
                                         sizeof(cert_auth_info_st),
-                                        0)) < 0) {
+                                        1)) < 0) {
                gnutls_assert();
                return ret;
        }