tree 77db9c7d697dcb1502c054312a3f5b9ed9e696af
parent a0e5223bb89f6fd8fd2550f8c30176651b0a6428
author David Benjamin <davidben@chromium.org> 1405710221 -0400
committer Adam Langley <agl@google.com> 1405958388 +0000

runner: Require the CertificateVerify signature and hash to match.

This change can probably be ported over to upstream crypto/tls. The current Go
TLS implementation ignores the signature and hash algorithm lists in
CertificateVerify and CertificateRequest. Take these into account so that our
tests assert OpenSSL fills them out correctly.

Also fix a bug in the original code where 'err' within the switch block get
shadowed.

Change-Id: I5d9c0b31ebb4662ecc767ed885a20707f0e86216
Reviewed-on: https://boringssl-review.googlesource.com/1253
Reviewed-by: Adam Langley <agl@google.com>