From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 18 Dec 2010 11:42:02 +0000 (+0100)
Subject: Do not be strict on RSA hash algorithm selection for signatures.
X-Git-Tag: gnutls_2_11_7~109
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=8cd6a6c32aab34fe9a9bb7e3f0420752ff43e8e2;p=thirdparty%2Fgnutls.git

Do not be strict on RSA hash algorithm selection for signatures.
---

diff --git a/lib/gnutls_sig.c b/lib/gnutls_sig.c
index cf1bab8e60..a23bd7f1d1 100644
--- a/lib/gnutls_sig.c
+++ b/lib/gnutls_sig.c
@@ -807,12 +807,6 @@ pk_hash_data (gnutls_pk_algorithm_t pk, gnutls_digest_algorithm_t hash,
   switch (pk)
     {
     case GNUTLS_PK_RSA:
-      if (hash != GNUTLS_DIG_SHA1 && hash != GNUTLS_DIG_SHA224 &&
-          hash != GNUTLS_DIG_SHA256)
-        {
-          gnutls_assert ();
-          return GNUTLS_E_INVALID_REQUEST;
-        }
       break;
     case GNUTLS_PK_DSA:
       if (params && hash != _gnutls_dsa_q_to_hash (params[1]))