On 2018/11/13 20:43, Bob Beck wrote:
> I have worked around this, for now, however this is NOT a bug.  The
> key they are using for the accepted sigalg does not use the right
> curve,
> So when we check for the curve, we should reject this signature ->
> this site is doing it wrong.
> 
> I have disabled the check for now.  (meaning we will verify with the
> wrong curve) and we'll revisit later depending on how much of a tire
> fire related sites are.
> 

FWIW more "wrong signature type" errors (fixed with the workaround)
seen at:

https://ccache.samba.org/
https://rspamd.com/

Reply via email to