tree b2ad565dfe0ee45d131ee582075d14c48516941c
parent b31040d0d8bbfa563a39e2321131074816d9d21b
author David Benjamin <davidben@chromium.org> 1433689253 -0400
committer Adam Langley <agl@google.com> 1433801693 +0000

Slightly simplify ServerKeyExchange handling.

The current logic requires each key exchange extract the key. It also
leaves handling X509_get_pubkey failure to the anonymous cipher suite
case which has an escape hatch where it goes back to check
ssl3_check_cert_and_algorithm.

Instead, get the key iff we know we have a signature to check.

Change-Id: If7154c7156aad3b89489defe4c1d951eeebf0089
Reviewed-on: https://boringssl-review.googlesource.com/5045
Reviewed-by: Adam Langley <agl@google.com>