summaryrefslogtreecommitdiff
path: root/lib/x509/verify.c
diff options
context:
space:
mode:
Diffstat (limited to 'lib/x509/verify.c')
-rw-r--r--lib/x509/verify.c5
1 files changed, 2 insertions, 3 deletions
diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index cfd79befc4..03416758dc 100644
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -347,8 +347,7 @@ static unsigned int check_time_status(gnutls_x509_crt_t crt, time_t now)
return 0;
}
-static
-int is_broken_allowed(gnutls_sign_algorithm_t sig, unsigned int flags)
+unsigned _gnutls_is_broken_sig_allowed(gnutls_sign_algorithm_t sig, unsigned int flags)
{
/* the first two are for backwards compatibility */
if ((sig == GNUTLS_SIGN_RSA_MD2)
@@ -718,7 +717,7 @@ verify_crt(gnutls_x509_crt_t cert,
* really matter.
*/
if (gnutls_sign_is_secure(sigalg) == 0 &&
- is_broken_allowed(sigalg, flags) == 0 &&
+ _gnutls_is_broken_sig_allowed(sigalg, flags) == 0 &&
is_issuer(cert, cert) == 0) {
MARK_INVALID(GNUTLS_CERT_INSECURE_ALGORITHM);
}