tree 49c6287fae5d60c1a07bab485e5a9f90ddfca316
parent b74b08144ea12adb229d9a4a7855ebfdbb7f7c8c
author David Benjamin <davidben@google.com> 1475814095 -0400
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1476032681 +0000

Revise server-side ECDSA certificate checks.

This is in preparation for simplifying tls1_check_group_id, called by
tls1_check_ec_cert, which, in turn, is in preparation for moving the
peer group list to SSL_HANDSHAKE.

It also helps with bug #55. Move the key usage check to the certificate
configuration sanity check. There's no sense in doing it late. Also
remove the ECDSA peer curve check as we configure certificates
externally. With only one certificate, there's no sense in trying to
remove it.

BUG=55

Change-Id: I8c116337770d96cc9cfd4b4f0ca7939a4f05a1a9
Reviewed-on: https://boringssl-review.googlesource.com/11524
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>