tree b0a19f8a95e5cbabb196df16e394c073248eeb57
parent 7bf80e12d68f53fb2b814de1904e24fc805dca69
author David Benjamin <davidben@google.com> 1468014296 -0700
committer David Benjamin <davidben@google.com> 1468341010 +0000

Don't call tls12_get_hash in the server handshake.

Instead have ssl3_cert_verify_hash output the hash, since it already
knows it. Also add a missing EVP_PKEY_CTX_set_signature_md call on the
client half. (Although, the call isn't actually necessary.)

Also remove now unnecessary static assert. Since EVP_md5_sha1 is an
EVP_MD itself, EVP_MAX_MD_SIZE is required to fit it already.

Change-Id: Ief74fdbdf08e9f124679475bafba2f6f1d8fc687
Reviewed-on: https://boringssl-review.googlesource.com/8692
Reviewed-by: Steven Valdez <svaldez@google.com>
Reviewed-by: David Benjamin <davidben@google.com>