summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--lib/alert.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/lib/alert.c b/lib/alert.c
index 61a14a070b..d3d58888fc 100644
--- a/lib/alert.c
+++ b/lib/alert.c
@@ -191,6 +191,10 @@ int gnutls_error_to_alert(int err, int *level)
int ret, _level = -1;
switch (err) { /* send appropriate alert */
+ case GNUTLS_E_PK_SIG_VERIFY_FAILED:
+ ret = GNUTLS_A_DECRYPT_ERROR;
+ _level = GNUTLS_AL_FATAL;
+ break;
case GNUTLS_E_DECRYPTION_FAILED:
/* GNUTLS_A_DECRYPTION_FAILED is not sent, because
* it is not defined in SSL3. Note that we must
@@ -234,7 +238,6 @@ int gnutls_error_to_alert(int err, int *level)
case GNUTLS_E_ASN1_DER_OVERFLOW:
case GNUTLS_E_CERTIFICATE_ERROR:
case GNUTLS_E_CERTIFICATE_VERIFICATION_ERROR:
- case GNUTLS_E_PK_SIG_VERIFY_FAILED:
ret = GNUTLS_A_BAD_CERTIFICATE;
_level = GNUTLS_AL_FATAL;
break;