8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11

Reviewed-by: valeriep
This commit is contained in:
Xue-Lei Andrew Fan 2019-04-03 16:23:22 -07:00
parent 2f20909d10
commit 661b5f1534
7 changed files with 36 additions and 16 deletions

View file

@ -565,7 +565,7 @@ final class CertificateVerify {
ClientHandshakeContext chc = (ClientHandshakeContext)context;
this.signatureScheme = SignatureScheme.getPreferableAlgorithm(
chc.peerRequestedSignatureSchemes,
x509Possession.popPrivateKey,
x509Possession,
chc.negotiatedProtocol);
if (signatureScheme == null) {
// Unlikely, the credentials generator should have
@ -866,7 +866,7 @@ final class CertificateVerify {
this.signatureScheme = SignatureScheme.getPreferableAlgorithm(
context.peerRequestedSignatureSchemes,
x509Possession.popPrivateKey,
x509Possession,
context.negotiatedProtocol);
if (signatureScheme == null) {
// Unlikely, the credentials generator should have