tree daa27ec3ef9985512b241008b96cb00553b7251a
parent c7a3a148721c2b02ed31297bcc2a823949225e67
author David Benjamin <davidben@chromium.org> 1433688812 -0400
committer Adam Langley <agl@google.com> 1433801625 +0000

Get rid of CERT_PKEY slots in SESS_CERT.

This doesn't even change behavior. Unlike local configuration, the peer
can never have multiple certificates anyway. (Even with a renego, the
SESS_CERT is created anew.)

This does lose the implicit certificate type check, but the certificate
type is already checked in ssl3_get_server_certificate and later checked
post-facto in ssl3_check_cert_and_algorithm (except that one seems to
have some bugs like it accepts ECDSA certificates for RSA cipher suites,
to be cleaned up in a follow-up). Either way, we have the certificate
mismatch tests for this.

BUG=486295

Change-Id: I437bb723bb310ad54ee4150eda67c1cfe43377b3
Reviewed-on: https://boringssl-review.googlesource.com/5044
Reviewed-by: Adam Langley <agl@google.com>