Fix server selection of TLS 1.3 suites
@@ -3869,6 +3869,9 @@ static boolean isValidSignatureAlgorithmForServerKeyExchange(short signatureAlgo
return false;
}
+ case KeyExchangeAlgorithm.NULL:
+ return SignatureAlgorithm.anonymous != signatureAlgorithm;
+
default:
return false;
}
