CVSROOT: /cvs Module name: src Changes by: b...@cvs.openbsd.org 2020/05/09 10:52:15
Modified files:
lib/libssl : ssl_sigalgs.c
Log message:
Forcibly ensure that only PSS may be used with RSA in TLS 1.3.
This prevents us from incorrectly choosing a PKCS1 based signature
if the client advertises support for them but also prefers them to
PSS such as appears to be the case with gnuTLS.
ok jsing@
