CERT_PKEY_SIGN
{ "Sign with EE key", CERT_PKEY_SIGN },
if (!(pvalid[SSL_PKEY_ECC] & CERT_PKEY_SIGN))
s->s3.tmp.valid_flags[i] = CERT_PKEY_SIGN;
pvalid[idx] = CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN;
rv |= *pvalid & (CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN);
rv |= CERT_PKEY_SIGN | CERT_PKEY_EXPLICIT_SIGN;
*pvalid &= CERT_PKEY_EXPLICIT_SIGN | CERT_PKEY_SIGN;