Blame SOURCES/0020-sigalgs-fix-alerts.patch
|
 |
2871ff |
diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c
|
|
|
2871ff |
index 3579202c22..134c948bcb 100644
|
|
|
2871ff |
--- a/ssl/t1_lib.c
|
|
|
2871ff |
+++ b/ssl/t1_lib.c
|
|
|
2871ff |
@@ -3302,7 +3302,7 @@ int tls_choose_sigalg(SSL *s, int fatalerrs)
|
|
|
2871ff |
if ((lu = tls1_get_legacy_sigalg(s, -1)) == NULL) {
|
|
|
2871ff |
if (!fatalerrs)
|
|
|
2871ff |
return 1;
|
|
|
2871ff |
- SSLfatal(s, SSL_AD_INTERNAL_ERROR,
|
|
|
2871ff |
+ SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
|
|
|
2871ff |
SSL_R_NO_SUITABLE_SIGNATURE_ALGORITHM);
|
|
|
2871ff |
return 0;
|
|
|
2871ff |
}
|
|
|
2871ff |
@@ -3317,7 +3317,7 @@ int tls_choose_sigalg(SSL *s, int fatalerrs)
|
|
|
2871ff |
if (i == sent_sigslen) {
|
|
|
2871ff |
if (!fatalerrs)
|
|
|
2871ff |
return 1;
|
|
|
2871ff |
- SSLfatal(s, SSL_AD_ILLEGAL_PARAMETER,
|
|
|
2871ff |
+ SSLfatal(s, SSL_AD_HANDSHAKE_FAILURE,
|
|
|
2871ff |
SSL_R_WRONG_SIGNATURE_TYPE);
|
|
|
2871ff |
return 0;
|
|
|
2871ff |
}
|