Gilles Peskine 5d2511c4d4 SHA-1 deprecation: allow it in key exchange ...

By default, keep allowing SHA-1 in key exchange signatures. Disabling
it causes compatibility issues, especially with clients that use
TLS1.2 but don't send the signature_algorithms extension.

SHA-1 is forbidden in certificates by default, since it's vulnerable
to offline collision-based attacks.

2017-06-06 18:44:14 +02:00

69 KiB

Raw Blame History

View Raw