added

Author: royb

tls/src/main/java/org/bouncycastle/tls/TlsUtils.java

@@ -5021,8 +5021,9 @@ else if (null == clientSigAlgsCert)
                 valid = containsSignatureAlgorithm(clientSigAlgsCert, sigAndHashAlg)
                     || (null != clientSigAlgs && containsSignatureAlgorithm(clientSigAlgs, sigAndHashAlg));
             }
-
-            // Do the validation
+            if (securityParameters.cksCode != 0)
+            {
+                // Do the validation
 
                 // NATIVE
                 TBSCertificate subjectTbs = ((BcTlsCertificate)subjectCert).getCertificate().getTBSCertificate();