Problem

The task

Customers can load TLS certificates into an `s2n_config` and later associate a security policy with that config (e.g. by calling `s2n_connection_set_config` or by changing the cipher preferences). Today the system does **not** verify that the loaded certificates’ signature algorithms are compatible with the policy’s…