tls: "server cert is not RSA" is a fatal error

function                                             old     new   delta
tls_handshake                                       2022    2019      -3

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Denys Vlasenko 2021-10-01 22:03:09 +02:00
parent ed9aa89269
commit 934bb01d51

View File

@ -1940,7 +1940,7 @@ static void send_client_key_exchange(tls_state_t *tls)
if (!(tls->flags & NEED_EC_KEY)) { if (!(tls->flags & NEED_EC_KEY)) {
/* RSA */ /* RSA */
if (!(tls->flags & GOT_CERT_RSA_KEY_ALG)) if (!(tls->flags & GOT_CERT_RSA_KEY_ALG))
bb_simple_error_msg("server cert is not RSA"); bb_simple_error_msg_and_die("server cert is not RSA");
tls_get_random(premaster, RSA_PREMASTER_SIZE); tls_get_random(premaster, RSA_PREMASTER_SIZE);
if (TLS_DEBUG_FIXED_SECRETS) if (TLS_DEBUG_FIXED_SECRETS)