From 9dfa93f4b9bd3e1d3b1bf38991a5db53a9eee1e5 Mon Sep 17 00:00:00 2001
From: Eric Blankenhorn <eric@wolfssl.com>
Date: Mon, 6 Apr 2026 16:23:25 -0500
Subject: [PATCH] Fix from review

---
 src/internal.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/internal.c b/src/internal.c
index f75f435b..e1ab4fd0 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -7211,7 +7211,9 @@ static int DoUserAuthRequestRsaCert(WOLFSSH* ssh, WS_UserAuthData_PublicKey* pk,
             sigTypeOk = 1;
         }
     #ifdef WOLFSSH_CERTS
-        else if (pk->publicKeyFmtId == ID_X509V3_SSH_RSA) {
+        else if (pk->publicKeyTypeSz == 14
+                    && WMEMCMP(pk->publicKeyType,
+                            "x509v3-ssh-rsa", 14) == 0) {
             /* RFC 6187 Section 5: the signature uses the underlying
              * RSA algorithm, not the X.509 key type name. */
             if ((publicKeyTypeSz == 7