go
go copied to clipboard
`selectSignatureSchemeDC` does not account for the client's `supported_algorithms`
selectSignatureSchemeDC only checks the client's supportedSignatureAlgorithmsDC field. Per the spec the selected signature scheme MUST be in both the supportedSignatureAlgorithmsDC and supportedSignatureAlgorithms fields.