We can now actually handle multiple certificate types in the server

and will choose one depending on which ciphersuites the client
offered.

1 files changed, 3 insertions, 2 deletions

diff --git a/src/tls/tls_client.cpp b/src/tls/tls_client.cpp
index 215ff6972..ba0d1e506 100644
--- a/src/tls/tls_client.cpp
+++ b/src/tls/tls_client.cpp
@@ -299,10 +299,11 @@ void Client::process_handshake_msg(Handshake_Type type,
 
       if(state->received_handshake_msg(CERTIFICATE_REQUEST))
          {
-         std::vector<byte> types = state->cert_req->acceptable_types();
+         const std::vector<std::string>& types =
+            state->cert_req->acceptable_cert_types();
 
          std::vector<X509_Certificate> client_certs =
-            creds.cert_chain("", // FIXME use types here
+            creds.cert_chain(types,
                              "tls-client",
                              state->client_hello->sni_hostname());