diff --git a/library/ssl_misc.h b/library/ssl_misc.h index b93817a98..0610ac0ce 100644 --- a/library/ssl_misc.h +++ b/library/ssl_misc.h @@ -2171,9 +2171,6 @@ static inline int mbedtls_ssl_tls13_check_sig_alg_cert_key_match( mbedtls_pk_type_t pk_type = mbedtls_ssl_sig_from_pk( key ); size_t key_size = mbedtls_pk_get_bitlen( key ); - if( !mbedtls_ssl_sig_alg_is_supported( ssl, sig_alg ) ) - return( 0 ); - switch( pk_type ) { #if defined(MBEDTLS_ECDSA_C) @@ -2224,23 +2221,6 @@ static inline int mbedtls_ssl_tls13_check_sig_alg_cert_key_match( #endif /* MBEDTLS_SHA512_C */ #endif /* MBEDTLS_PKCS1_V21 */ -#if defined(MBEDTLS_PKCS1_V15) -#if defined(MBEDTLS_SHA256_C) - case MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA256: - return( key_size <= 2048 ); -#endif /* MBEDTLS_SHA256_C */ - -#if defined(MBEDTLS_SHA384_C) - case MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA384: - return( key_size <= 3072 ); -#endif /* MBEDTLS_SHA384_C */ - -#if defined(MBEDTLS_SHA512_C) - case MBEDTLS_TLS1_3_SIG_RSA_PKCS1_SHA512: - return( key_size <= 4096 ); -#endif /* MBEDTLS_SHA512_C */ -#endif /* MBEDTLS_PKCS1_V15 */ - default: break; }