--- a/src/java.base/share/classes/sun/security/ssl/CertificateMessage.java	Mon Aug 12 23:37:48 2019 +0200
+++ b/src/java.base/share/classes/sun/security/ssl/CertificateMessage.java	Mon Aug 12 21:36:29 2019 -0700
@@ -1034,6 +1034,7 @@
                 // Don't select a signature scheme unless we will be able to
                 // produce a CertificateVerify message later
                 if (SignatureScheme.getPreferableAlgorithm(
+                        hc.algorithmConstraints,
                         hc.peerRequestedSignatureSchemes,
                         ss, hc.negotiatedProtocol) == null) {