treat sig_alg and algorithm comparison in a consistent way over all certificate types

2008-03-26 13:10:36 +00:00
parent e37f7715bf
commit 5298777ad8
2 changed files with 9 additions and 3 deletions
@@ -484,6 +484,11 @@ static bool parse_certificate(private_x509_ac_t *this)
 				break;
 			case AC_OBJ_ALGORITHM:
 				this->algorithm = parse_algorithmIdentifier(object, level, NULL);
+				if (this->algorithm != sig_alg)
+				{
+					DBG1("  signature algorithms do not agree");
+					return FALSE;
+				}
 				break;
 			case AC_OBJ_SIGNATURE:
 				this->signature = object;