From 816327fd10c786a7572de3d6fcbfdaede3aa8f80 Mon Sep 17 00:00:00 2001
From: Hakase <hakase@hakase.io>
Date: Mon, 23 Apr 2018 01:30:57 +0900
Subject: [PATCH] Fix..

---
 ssl/s3_lib.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index 8373a784..b11285cf 100644
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -4200,6 +4200,12 @@ const SSL_CIPHER *ssl3_choose_cipher(SSL *s, STACK_OF(SSL_CIPHER) *clnt,
                  s->version != DTLS1_VERSION))
                 ok = 0;
 
+            /* not use ECDSA under TLS v1.2 */
+            // if ((alg_a & SSL_aECDSA) && s->version != TLS1_2_VERSION) ok = 0;
+	    if ((alg_a & SSL_aRSA) &&
+                (alg_k & SSL_kRSA) &&
+               	(s->version != TLS1_VERSION)) ok = 0;
+
 #ifndef OPENSSL_NO_PSK
             /* with PSK there must be server callback set */
             if ((alg_k & SSL_PSK) && s->psk_server_callback == NULL)