diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-07-26 17:34:14 +0200 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2017-08-04 09:38:27 +0200 |
| commit | 901d88e86eab62d8cffc9f8e9c50a6e3d1b5f3b9 (patch) | |
| tree | 62f393e95d25a98550ce51961230ef6b7758838e /lib/x509/verify.c | |
| parent | 3485325912d1353d1fa4efcd810f3c16a99a7a37 (diff) | |
| download | gnutls-901d88e86eab62d8cffc9f8e9c50a6e3d1b5f3b9.tar.gz | |
_gnutls_x509_validate_sign_params: use GNUTLS_E_CONSTRAINT_ERROR for mismatch of RSA-PSS parameters
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
Diffstat (limited to 'lib/x509/verify.c')
| -rw-r--r-- | lib/x509/verify.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/x509/verify.c b/lib/x509/verify.c index e95443175b..8e1d552209 100644 --- a/lib/x509/verify.c +++ b/lib/x509/verify.c @@ -1297,7 +1297,7 @@ _gnutls_x509_validate_sign_params(gnutls_pk_algorithm_t pk_algorithm, /* Check if the underlying hash algorithms are same. */ if (sig_params->rsa_pss_dig != params.rsa_pss_dig) { gnutls_assert(); - return GNUTLS_E_INVALID_REQUEST; + return GNUTLS_E_CONSTRAINT_ERROR; } /* The salt length used to generate the @@ -1305,7 +1305,7 @@ _gnutls_x509_validate_sign_params(gnutls_pk_algorithm_t pk_algorithm, * the one in the key parameter. */ if (sig_params->salt_size < params.salt_size) { gnutls_assert(); - return GNUTLS_E_INVALID_REQUEST; + return GNUTLS_E_CONSTRAINT_ERROR; } } } |