Somewhat contorted, but fixes the issue with sending hash/sig ids with

older versions.

1 files changed, 3 insertions, 2 deletions

diff --git a/src/tls/tls_server.cpp b/src/tls/tls_server.cpp
index 6f7ce9489..be4cba164 100644
--- a/src/tls/tls_server.cpp
+++ b/src/tls/tls_server.cpp
@@ -263,10 +263,11 @@ void TLS_Server::process_handshake_msg(Handshake_Type type,
 
          if(state->suite.kex_algo() != "")
             {
-            if(state->suite.kex_algo() == "")
+            if(state->suite.kex_algo() == "DH")
                state->kex_priv = new DH_PrivateKey(rng, policy.dh_group());
             else
-               throw Internal_Error("TLS_Server: Unknown ciphersuite kex type");
+               throw Internal_Error("TLS_Server: Unknown ciphersuite kex type " +
+                                    state->suite.kex_algo());
 
             state->server_kex =
                new Server_Key_Exchange(writer, state, rng, private_key);