tree cbe69e23a0bc62401e58b166ca4cb18c639d2f92
parent c454aba2034a9f35aad7923de178b5ae5bf063d7
author Ronald Cron <ronald.cron@arm.com> 1663256082 +0200
committer Ronald Cron <ronald.cron@arm.com> 1663676792 +0200

tls13: server: Add sig alg checks when selecting best certificate

When selecting the server certificate based on
the signature algorithms supported by the client,
check the signature algorithms as close as possible
to the way they are checked to compute the
signature for the server to prove it possesses
the private key associated to the certificate.

That way we minimize the odds of selecting a
certificate for which the server will not be
able to compute the signature to prove it
possesses the private key associated to the
certificate.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>