Enforce signature hash policy properly

Previously if the client did not send signature_algorithms, or if
it only included algos not in the policy, we would just fallback to
the hardcoded SHA-1 default of TLS v1.2

Instead check the policy before accepting anything.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/cli/tls_server.cpp b/src/cli/tls_server.cpp
index 22e592f29..82b2f5e2f 100644
--- a/src/cli/tls_server.cpp
+++ b/src/cli/tls_server.cpp
@@ -218,7 +218,7 @@ class TLS_Server final : public Command
                      }
                   catch(std::exception& e)
                      {
-                     std::cout << "Connection1 problem: " << e.what() << std::endl;
+                     std::cout << "Connection problem: " << e.what() << std::endl;
                      if(is_tcp)
                         {
                         ::close(fd);