Gilles Peskine 7344e1bd05 SHA-1 deprecation: allow it in key exchange ...

By default, keep allowing SHA-1 in key exchange signatures. Disabling
it causes compatibility issues, especially with clients that use
TLS1.2 but don't send the signature_algorithms extension.

SHA-1 is forbidden in certificates by default, since it's vulnerable
to offline collision-based attacks.

2017-06-06 19:09:02 +02:00

..

data_files

Document test data makefile

2017-06-06 19:08:23 +02:00

scripts

Fix check-doxy-blocks.pl to run from root dir

2017-05-13 19:22:03 +01:00

suites

SHA-1 deprecation: allow it in key exchange

2017-06-06 19:09:02 +02:00

.gitignore

Move some ignore patterns to subdirectories

2015-01-28 15:33:23 +00:00

CMakeLists.txt

Remove need for elevated command line in Windows

2017-02-20 21:47:29 +00:00

compat.sh

Allow SHA-1 in test scripts

2017-06-06 19:08:23 +02:00

Descriptions.txt

Add selftest program to the list of tests

2014-04-04 16:33:01 +02:00

Makefile

Cosmetics in Makefiles

2015-07-08 22:12:06 +01:00

ssl-opt.sh

SHA-1 deprecation: allow it in key exchange

2017-06-06 19:09:02 +02:00