boringssl/ssl
David Benjamin ea9a0d5313 Refine SHA-1 default in signature algorithm negotiation.
Rather than blindly select SHA-1 if we can't find a matching one, act as
if the peer advertised rsa_pkcs1_sha1 and ecdsa_sha1. This means that we
will fail the handshake if no common algorithm may be found.

This is done in preparation for removing the SHA-1 default in TLS 1.3.

Change-Id: I3584947909d3d6988b940f9404044cace265b20d
Reviewed-on: https://boringssl-review.googlesource.com/8695
Reviewed-by: David Benjamin <davidben@google.com>
2016-07-12 16:32:31 +00:00
..
test Refine SHA-1 default in signature algorithm negotiation. 2016-07-12 16:32:31 +00:00
CMakeLists.txt Rename (s3,d1)_meth.c. 2016-07-11 17:22:35 +00:00
custom_extensions.c
d1_both.c Simplify ssl_get_message somewhat. 2016-07-11 23:01:32 +00:00
d1_lib.c
d1_pkt.c
d1_srtp.c
dtls_method.c Don't use init_buf in DTLS. 2016-07-11 23:01:11 +00:00
dtls_record.c
handshake_client.c Refine SHA-1 default in signature algorithm negotiation. 2016-07-12 16:32:31 +00:00
handshake_server.c Refine SHA-1 default in signature algorithm negotiation. 2016-07-12 16:32:31 +00:00
internal.h Refine SHA-1 default in signature algorithm negotiation. 2016-07-12 16:32:31 +00:00
s3_both.c Simplify ssl_get_message somewhat. 2016-07-11 23:01:32 +00:00
s3_enc.c Don't call tls12_get_hash in the server handshake. 2016-07-12 16:30:10 +00:00
s3_lib.c
s3_pkt.c Forbid renegotiation in TLS 1.3. 2016-07-11 18:26:27 +00:00
ssl_aead_ctx.c
ssl_asn1.c
ssl_buffer.c
ssl_cert.c Don't decompose sigalgs in key preferences. 2016-07-12 16:31:20 +00:00
ssl_cipher.c
ssl_ecdh.c Add SSL_get_curve_id and SSL_get_dhe_group_size. 2016-06-30 23:20:34 +00:00
ssl_file.c
ssl_lib.c Allow CECPQ1 cipher suites to do False Start. 2016-07-11 22:55:31 +00:00
ssl_rsa.c Don't decompose sigalgs in key preferences. 2016-07-12 16:31:20 +00:00
ssl_session.c
ssl_stat.c Remove a/b parameters to send_change_cipher_spec. 2016-06-29 18:50:47 +00:00
ssl_test.cc Revert "Move C++ helpers into |bssl| namespace." 2016-07-12 08:09:33 -07:00
t1_enc.c Move the Digest/Sign split for SignatureAlgorithms to a lower level. 2016-07-01 19:01:33 +00:00
t1_lib.c Refine SHA-1 default in signature algorithm negotiation. 2016-07-12 16:32:31 +00:00
tls_method.c Don't use init_buf in DTLS. 2016-07-11 23:01:11 +00:00
tls_record.c