gstarovo

> failure in [`test (py3.6 with tackpy, ubuntu-20.04, 3.6, tackpy)`](https://github.com/tlsfuzzer/tlslite-ng/actions/runs/9031465467/job/24818466860?pr=517#logs) seems to be relevant Yes, yes, I'm trying to understand why it is only with Python 3.6, or maybe the...

> _[`tlslite/tlsconnection.py` line 2046 at r8](https://reviewable.io/reviews/tlsfuzzer/tlslite-ng/547#-OPal3yFANnw7MPKy-fL:-OPal3yG-jxdFJnuEW3X:b5efo3x) ([raw file](https://github.com/tlsfuzzer/tlslite-ng/blob/7348ef7e9093e023ba26f0fb08717703c159a50d/tlslite/tlsconnection.py#L2046)):_ > > > ```python > > AlertDescription.illegal_parameter, > > "The delegated credential is missing, though the peer "\ > > "provided extension...

> _[`scripts/tls.py` line 125 at r10](https://reviewable.io/reviews/tlsfuzzer/tlslite-ng/547#-OUKXQ2oA67K4PYHewXm:-OUiPxf404auyZUNFmyS:bwu7txx) ([raw file](https://github.com/tlsfuzzer/tlslite-ng/blob/03429ea73d5629c0e905de1603e2c76e4d788adc/scripts/tls.py#L125)):_ > Previously, tomato42 (Alicja Kario) wrote… > > I still don't follow why we need to specify the `--dc-sig-scheme`... > In case...

Thank you, will try

I have updated the code according to the comments, but I have a problem with checking time validity since for that is required to know notBefore time. I have tested...

> #where do we verify the the server's delegated credential was signed by server's key? the verification happens here: ``` `if not dc_cert_ext.delegated_credential.verify( cert_entry, c_hello, cert_v): raise TLSDecryptionFailed("Server Delegated Credential...