summaryrefslogtreecommitdiff
path: root/lib/pubkey.c
diff options
context:
space:
mode:
Diffstat (limited to 'lib/pubkey.c')
-rw-r--r--lib/pubkey.c6
1 files changed, 2 insertions, 4 deletions
diff --git a/lib/pubkey.c b/lib/pubkey.c
index f98734c85b..cbf7f47e0c 100644
--- a/lib/pubkey.c
+++ b/lib/pubkey.c
@@ -1631,10 +1631,8 @@ gnutls_pubkey_verify_data2(gnutls_pubkey_t pubkey,
return ret;
}
- if (!(flags & GNUTLS_VERIFY_ALLOW_BROKEN)) {
- if (gnutls_sign_is_secure(algo) == 0) {
- return gnutls_assert_val(GNUTLS_E_INSUFFICIENT_SECURITY);
- }
+ if (gnutls_sign_is_secure(algo) == 0 && _gnutls_is_broken_sig_allowed(algo, flags) == 0) {
+ return gnutls_assert_val(GNUTLS_E_INSUFFICIENT_SECURITY);
}
return 0;