commit f4923b4e63e7db3cc1171b983e97d1565c0a2a08
author Kazuho Oku <kazuhooku@gmail.com> Sun Mar 21 08:55:28 2021 +0900
committer Kazuho Oku <kazuhooku@gmail.com> Sun Mar 21 08:55:28 2021 +0900
tree 8f7c1bba1e3b3ec2179e93515790796139adac8c
parent 6ec69c65b2b7ca73e6cd6fb168e11950f7ca59e4

validation has moved to the callback

lib/picotls.c

diff --git a/lib/picotls.c b/lib/picotls.c
index 874e5d1..210d530 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -2868,16 +2868,6 @@
         src = end;
     });
 
-    /* validate */
-    switch (algo) {
-    case PTLS_SIGNATURE_RSA_PSS_RSAE_SHA256:
-    case PTLS_SIGNATURE_ECDSA_SECP256R1_SHA256:
-        /* ok */
-        break;
-    default:
-        ret = PTLS_ALERT_ILLEGAL_PARAMETER;
-        goto Exit;
-    }
     signdata_size = build_certificate_verify_signdata(signdata, tls->key_schedule, context_string);
     if (tls->certificate_verify.cb != NULL) {
         ret = tls->certificate_verify.cb(tls->certificate_verify.verify_ctx, algo, ptls_iovec_init(signdata, signdata_size),