diff options
| author | Péter Dimitrov <[email protected]> | 2018-09-25 16:15:38 +0200 |
|---|---|---|
| committer | Péter Dimitrov <[email protected]> | 2018-10-15 10:21:23 +0200 |
| commit | 4c8305120c9d0fbe855d1db2b46ab7c94d82e8bd (patch) | |
| tree | c4e46fea7dfe0db64d89d10d2b0a67966656184e | |
| parent | c115250a755cabfce3cd24429e9eaec70c8d8a59 (diff) | |
| download | otp-4c8305120c9d0fbe855d1db2b46ab7c94d82e8bd.tar.gz otp-4c8305120c9d0fbe855d1db2b46ab7c94d82e8bd.tar.bz2 otp-4c8305120c9d0fbe855d1db2b46ab7c94d82e8bd.zip | |
ssl: Filter "signature_algs_cert" from socket options
Change-Id: Ifb933d1bad647b941b7324c0712a7bc20ae74efa
| -rw-r--r-- | lib/ssl/src/ssl.erl | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/lib/ssl/src/ssl.erl b/lib/ssl/src/ssl.erl index ef9aac34bf..7e1c3fc462 100644 --- a/lib/ssl/src/ssl.erl +++ b/lib/ssl/src/ssl.erl @@ -1041,8 +1041,8 @@ handle_options(Opts0, Role, Host) -> alpn_preferred_protocols, next_protocols_advertised, client_preferred_next_protocols, log_alert, log_level, server_name_indication, honor_cipher_order, padding_check, crl_check, crl_cache, - fallback, signature_algs, eccs, honor_ecc_order, beast_mitigation, - max_handshake_size, handshake, customize_hostname_check], + fallback, signature_algs, signature_algs_cert, eccs, honor_ecc_order, + beast_mitigation, max_handshake_size, handshake, customize_hostname_check], SockOpts = lists:foldl(fun(Key, PropList) -> proplists:delete(Key, PropList) end, Opts, SslOptions), @@ -1645,6 +1645,14 @@ new_ssl_options([{signature_algs, Value} | Rest], #ssl_options{} = Opts, RecordC handle_hashsigns_option(Value, tls_version(RecordCB:highest_protocol_version()))}, RecordCB); +new_ssl_options([{signature_algs_cert, Value} | Rest], #ssl_options{} = Opts, RecordCB) -> + new_ssl_options( + Rest, + Opts#ssl_options{signature_algs_cert = + handle_signature_algorithms_option( + Value, + tls_version(RecordCB:highest_protocol_version()))}, + RecordCB); new_ssl_options([{protocol, dtls = Value} | Rest], #ssl_options{} = Opts, dtls_record = RecordCB) -> new_ssl_options(Rest, Opts#ssl_options{protocol = Value}, RecordCB); new_ssl_options([{protocol, tls = Value} | Rest], #ssl_options{} = Opts, tls_record = RecordCB) -> |