Do not be strict on RSA hash algorithm selection for signatures.

diff --git a/lib/gnutls_sig.c b/lib/gnutls_sig.c
index cf1bab8e60d2fc45688454045cf89b0178370f47..a23bd7f1d1031d10028ac7b11b860c4f7c7b7a4e 100644 (file)
--- a/lib/gnutls_sig.c
+++ b/lib/gnutls_sig.c
@@ -807,12 +807,6 @@ pk_hash_data (gnutls_pk_algorithm_t pk, gnutls_digest_algorithm_t hash,
   switch (pk)
     {
     case GNUTLS_PK_RSA:
-      if (hash != GNUTLS_DIG_SHA1 && hash != GNUTLS_DIG_SHA224 &&
-          hash != GNUTLS_DIG_SHA256)
-        {
-          gnutls_assert ();
-          return GNUTLS_E_INVALID_REQUEST;
-        }
       break;
     case GNUTLS_PK_DSA:
       if (params && hash != _gnutls_dsa_q_to_hash (params[1]))