From 024c3aeb9e2654562788bc07e1ca21cd93a0cb43 Mon Sep 17 00:00:00 2001 From: Valerio Setti Date: Wed, 12 Nov 2025 12:51:52 +0100 Subject: [PATCH] library: ssl: remove duplicate check in ssl_parse_server_key_exchange() The check being removed is already done few lines above so there is no need to repeat it twice. Signed-off-by: Valerio Setti --- library/ssl_tls12_client.c | 8 -------- 1 file changed, 8 deletions(-) diff --git a/library/ssl_tls12_client.c b/library/ssl_tls12_client.c index c4f75b63de..131efbe248 100644 --- a/library/ssl_tls12_client.c +++ b/library/ssl_tls12_client.c @@ -1977,14 +1977,6 @@ start_processing: /* * Verify signature */ - if (!mbedtls_pk_can_do(peer_pk, (mbedtls_pk_type_t) pk_alg)) { - MBEDTLS_SSL_DEBUG_MSG(1, ("bad server key exchange message")); - mbedtls_ssl_send_alert_message( - ssl, - MBEDTLS_SSL_ALERT_LEVEL_FATAL, - MBEDTLS_SSL_ALERT_MSG_HANDSHAKE_FAILURE); - return MBEDTLS_ERR_SSL_PK_TYPE_MISMATCH; - } #if defined(MBEDTLS_SSL_ECP_RESTARTABLE_ENABLED) if (ssl->handshake->ecrs_enabled) {