Add TLS::Policy::minimum_signature_strength

Changes TLS callback API for cert verify to accept Policy&

Sets default signature strength to 110 to force RSA ~2048.

1 files changed, 3 insertions, 2 deletions

diff --git a/src/cli/tls_client.cpp b/src/cli/tls_client.cpp
index 6fbb59e6f..8e21e21e5 100644
--- a/src/cli/tls_client.cpp
+++ b/src/cli/tls_client.cpp
@@ -255,12 +255,13 @@ class TLS_Client final : public Command, public Botan::TLS::Callbacks
          const std::vector<Botan::X509_Certificate>& cert_chain,
          const std::vector<Botan::Certificate_Store*>& trusted_roots,
          Botan::Usage_Type usage,
-         const std::string& hostname) override
+         const std::string& hostname,
+         const Botan::TLS::Policy& policy) override
          {
          if(cert_chain.empty())
             throw std::invalid_argument("Certificate chain was empty");
 
-         Botan::Path_Validation_Restrictions restrictions(true, 80);
+         Botan::Path_Validation_Restrictions restrictions(true, policy.minimum_signature_strength());
 
          auto ocsp_timeout = std::chrono::milliseconds(300);