anchor.diff:           #state{connection_states = _ConnectionStates0,
                   ssl_options = #ssl_options{ciphers = ServerCiphers,
                                              signature_algs = ServerSignAlgs,
  -                                           signature_algs_cert = _SignatureSchemes, %% TODO: check!
                                              supported_groups = ServerGroups0},
                   session = #session{own_certificate = Cert}} = State0) ->
   
  
positive.code:     L.
  
  
  verify_signature_algorithm(#state{session = #session{sign_alg = SignatureScheme}} = State,
                             #certificate_verify_1_3{algorithm = SignatureScheme2}) ->
      %% TODO
      ok.
  
  
  verify_certificate_verify(#state{connection_states = ConnectionStates,
                            handshake_env =
                                #handshake_env{
                                   public_key_info = PublicKeyInfo,
                                   tls_handshake_history = HHistory}} = State0,
                     #certificate_verify_1_3{
                        algorithm = SignatureScheme,
                        signature = Signature}) ->
      #{security_parameters := SecParamsR} =
          ssl_record:pending_connection_state(ConnectionStates, write),
      #security_parameters{prf_algorithm = HKDFAlgo} = SecParamsR,
  
negative.code:                                      SslOptions#ssl_options.crl_check, CRLDbHandle, CertPath),
          Options = [{max_path_length, SslOptions#ssl_options.depth},
                     {verify_fun, ValidationFunAndState}],
          %% TODO: Validate if Certificate is using a supported signature algorithm
          %% (signature_algs_cert)!
          case public_key:pkix_path_validation(TrustedCert, CertPath, Options) of
              {ok, {PublicKeyInfo,_}} ->
                  {ok, {PeerCert, PublicKeyInfo}};
              {error, Reason} ->
                  ssl_handshake:handle_path_validation_error(Reason, PeerCert, ChainCerts,
                                                             SslOptions, Options,
                                                             CertDbHandle, CertDbRef)
          end
      catch
          error:{badmatch,{asn1, Asn1Reason}} ->
              %% ASN-1 decode of certificate somehow failed
              {error, {certificate_unknown, {failed_to_decode_certificate, Asn1Reason}}};
          error:OtherReason ->
              {error, {internal_error, {unexpected_error, OtherReason}}}
  