commit e0afc85719db9a0842bcfddcf4b15e856b253ee2
author Adam Langley <agl@google.com> Mon Jul 09 16:59:33 2018 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> Tue Jul 10 15:38:12 2018 +0000
tree 753c5a1c2da911002a1e06a91e3439fca3c04224
parent 428fb3ad524dc7591ff2251a8c2f6de5d08518f1

Send an alert if we fail to pick a signature algorithm.

Change-Id: Id7f5ef9932c4c491bd15085e3c604ebfcf259b7c
Reviewed-on: https://boringssl-review.googlesource.com/29665
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: David Benjamin <davidben@google.com>

ssl/tls13_both.cc

diff --git a/ssl/tls13_both.cc b/ssl/tls13_both.cc
index 4424318..b9f5163 100644
--- a/ssl/tls13_both.cc
+++ b/ssl/tls13_both.cc
@@ -537,6 +537,7 @@
   SSL *const ssl = hs->ssl;
   uint16_t signature_algorithm;
   if (!tls1_choose_signature_algorithm(hs, &signature_algorithm)) {
+    ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_HANDSHAKE_FAILURE);
     return ssl_private_key_failure;
   }