Method SSL.ServerConnection()->select_signature_scheme_1_3()

class SSL.ServerConnection

Method select_signature_scheme_1_3

protected int select_signature_scheme_1_3(CertificatePair cp, array(int) peer_schemes)

Description

RFC 8446 4.2.3: pick a signature scheme for cp that peer_schemes (the peer's offered EXTENSION_signature_algorithms) also accepts, restricted to the schemes TLS 1.3 actually allows for a live CertificateVerify (RSASSA-PSS or ECDSA; EdDSA isn't implemented, see Cipher.sign_1_3()'s

Returns

The chosen SignatureScheme, or -1 if none fit.