commit 47bb380f6dfdec698988dc1186978fb154a118b1
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Mon Jun 05 12:40:32 2023 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Thu Jun 08 11:50:49 2023 +0200
tree 33d8ba49fff3dee144a3d6e599765de3dc44f9a4
parent 9b76318138034de90314ae5fda2de2cf5aa44a96

Fix missing call to mbedtls_ssl_md_alg_from_hash()

I looked around and think this one the only place where a conversion was
missing.

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index f0067f4..aeb0957 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -8867,11 +8867,17 @@
             MBEDTLS_SSL_TLS12_SIG_ALG_FROM_SIG_AND_HASH_ALG(
                 received_sig_algs[i]);
 
+        mbedtls_md_type_t md_alg =
+            mbedtls_ssl_md_alg_from_hash((unsigned char) hash_alg_received);
+        if (md_alg == MBEDTLS_MD_NONE) {
+            continue;
+        }
+
         if (sig_alg == sig_alg_received) {
 #if defined(MBEDTLS_USE_PSA_CRYPTO)
             if (ssl->handshake->key_cert && ssl->handshake->key_cert->key) {
                 psa_algorithm_t psa_hash_alg =
-                    mbedtls_md_psa_alg_from_type(hash_alg_received);
+                    mbedtls_md_psa_alg_from_type(md_alg);
 
                 if (sig_alg_received == MBEDTLS_SSL_SIG_ECDSA &&
                     !mbedtls_pk_can_do_ext(ssl->handshake->key_cert->key,