ea9a0d5313
Rather than blindly select SHA-1 if we can't find a matching one, act as if the peer advertised rsa_pkcs1_sha1 and ecdsa_sha1. This means that we will fail the handshake if no common algorithm may be found. This is done in preparation for removing the SHA-1 default in TLS 1.3. Change-Id: I3584947909d3d6988b940f9404044cace265b20d Reviewed-on: https://boringssl-review.googlesource.com/8695 Reviewed-by: David Benjamin <davidben@google.com> |
||
---|---|---|
.. | ||
asn1.errordata | ||
bio.errordata | ||
bn.errordata | ||
cipher.errordata | ||
CMakeLists.txt | ||
conf.errordata | ||
dh.errordata | ||
digest.errordata | ||
dsa.errordata | ||
ec.errordata | ||
ecdh.errordata | ||
ecdsa.errordata | ||
engine.errordata | ||
err_data_generate.go | ||
err_test.cc | ||
err.c | ||
evp.errordata | ||
hkdf.errordata | ||
obj.errordata | ||
pem.errordata | ||
pkcs8.errordata | ||
rsa.errordata | ||
ssl.errordata | ||
x509.errordata | ||
x509v3.errordata |