Corrected bug which disallowed ciphersuites other than the CERTIFICATE ones to work.

diff --git a/lib/gnutls_handshake.c b/lib/gnutls_handshake.c
index 4265344c4429012d269717034d1427e32394386e..4abb19deb9d173002cabc64f2353bee141af8bca 100644 (file)
--- a/lib/gnutls_handshake.c
+++ b/lib/gnutls_handshake.c
@@ -2434,7 +2434,7 @@ int _gnutls_remove_unwanted_ciphersuites(gnutls_session session,
        /* if x509_cred==NULL we should remove all X509 ciphersuites
         */
 
-       if (session->security_parameters.entity == GNUTLS_SERVER) {
+       if (session->security_parameters.entity == GNUTLS_SERVER && x509_cred != NULL) {
                ret = _gnutls_server_select_cert(session, requested_pk_algo);
                if (ret < 0) {
                        gnutls_assert();