diff --git a/library/ssl_misc.h b/library/ssl_misc.h index 3b01db19fc..b93817a985 100644 --- a/library/ssl_misc.h +++ b/library/ssl_misc.h @@ -2163,7 +2163,7 @@ static inline int mbedtls_ssl_sig_alg_is_supported( #if defined(MBEDTLS_SSL_PROTO_TLS1_3) -static inline int mbedtls_ssl_tls13_sig_alg_is_available_for_pk( +static inline int mbedtls_ssl_tls13_check_sig_alg_cert_key_match( mbedtls_ssl_context *ssl, uint16_t sig_alg, mbedtls_pk_context *key) diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c index 3d5baa2a14..738b278ab1 100644 --- a/library/ssl_tls13_generic.c +++ b/library/ssl_tls13_generic.c @@ -871,7 +871,7 @@ static int ssl_tls13_get_sig_alg_from_pk( mbedtls_ssl_context *ssl, continue; } if( mbedtls_ssl_sig_alg_is_supported( ssl, *sig_alg) && - mbedtls_ssl_tls13_sig_alg_is_available_for_pk( + mbedtls_ssl_tls13_check_sig_alg_cert_key_match( ssl, *sig_alg, own_key ) ) { *algorithm = *sig_alg; diff --git a/library/ssl_tls13_server.c b/library/ssl_tls13_server.c index 0ebad933f2..e75a778d5a 100644 --- a/library/ssl_tls13_server.c +++ b/library/ssl_tls13_server.c @@ -390,7 +390,7 @@ static int ssl_tls13_pick_key_cert( mbedtls_ssl_context *ssl ) } MBEDTLS_SSL_DEBUG_MSG( 2,("Try get sig alg %04x",*sig_alg)); - if( mbedtls_ssl_tls13_sig_alg_is_available_for_pk( + if( mbedtls_ssl_tls13_check_sig_alg_cert_key_match( ssl, *sig_alg, &key_cert->cert->pk ) ) { ssl->handshake->key_cert = key_cert;