• Peter Wu's avatar
    crypto/tls: consolidate signatures handling in SKE and CV · c89d75f9
    Peter Wu authored
    ServerKeyExchange and CertificateVerify can share the same logic for
    picking a signature algorithm (based on the certificate public key and
    advertised algorithms), selecting a hash algorithm (depending on TLS
    version) and signature verification.
    
    Refactor the code to achieve code reuse, have common error checking
    (especially for intersecting supported signature algorithms) and to
    prepare for addition of new signature algorithms. Code should be easier
    to read since version-dependent logic is concentrated at one place.
    
    Change-Id: I978dec3815d28e33c3cfbc85f0c704b1894c25a3
    Reviewed-on: https://go-review.googlesource.com/79735Reviewed-by: 's avatarFilippo Valsorda <filippo@golang.org>
    Run-TryBot: Filippo Valsorda <filippo@golang.org>
    TryBot-Result: Gobot Gobot <gobot@golang.org>
    c89d75f9
handshake_server.go 22.1 KB