only bother reacting to verification failures if we want to use signing

pull/6932/head
paul-szczepanek-arm 2018-03-29 16:02:27 +01:00
parent c0f390f2cd
commit cfa53d5e6c
1 changed files with 13 additions and 7 deletions

View File

@ -912,13 +912,19 @@ void GenericSecurityManager::on_signature_verification_failure(connection_handle
return; return;
} }
cb->csrk_failures++; const bool signing = cb->signing_override_default ?
if (cb->csrk_failures == 3) { cb->signing_requested
cb->csrk_failures = 0; : _default_key_distribution.get_signing();
if (cb->is_master) {
requestPairing(connection); if (signing) {
} else { cb->csrk_failures++;
slave_security_request(connection); if (cb->csrk_failures == 3) {
cb->csrk_failures = 0;
if (cb->is_master) {
requestPairing(connection);
} else {
slave_security_request(connection);
}
} }
} }
} }