only bother reacting to verification failures if we want to use signing

pull/6932/head
paul-szczepanek-arm 2018-03-29 16:02:27 +01:00
parent c0f390f2cd
commit cfa53d5e6c
1 changed files with 13 additions and 7 deletions

View File

@ -912,6 +912,11 @@ void GenericSecurityManager::on_signature_verification_failure(connection_handle
return; return;
} }
const bool signing = cb->signing_override_default ?
cb->signing_requested
: _default_key_distribution.get_signing();
if (signing) {
cb->csrk_failures++; cb->csrk_failures++;
if (cb->csrk_failures == 3) { if (cb->csrk_failures == 3) {
cb->csrk_failures = 0; cb->csrk_failures = 0;
@ -922,6 +927,7 @@ void GenericSecurityManager::on_signature_verification_failure(connection_handle
} }
} }
} }
}
void GenericSecurityManager::on_slave_security_request( void GenericSecurityManager::on_slave_security_request(
connection_handle_t connection, connection_handle_t connection,