Don't push the error stack in ssl_sigalg_select()
authorbeck <beck@openbsd.org>
Tue, 9 Jul 2024 13:43:57 +0000 (13:43 +0000)
committerbeck <beck@openbsd.org>
Tue, 9 Jul 2024 13:43:57 +0000 (13:43 +0000)
commitccf5fc624c26da6d74c37ba18834beadc35e2bad
tree7283a40f6b7117ba2c799abdb4a91ba7cfcd082e
parent38e980d7ee25eb95f8a8566685b2433dffd5d142
Don't push the error stack in ssl_sigalg_select()

Doing so breaks certificate selection if a TLS 1.3 client does not support
EC certs, and needs to fall back to RSA.

ok tb@
lib/libssl/ssl_sigalgs.c