Gilles Peskine 5d2511c4d4 SHA-1 deprecation: allow it in key exchange ...

By default, keep allowing SHA-1 in key exchange signatures. Disabling
it causes compatibility issues, especially with clients that use
TLS1.2 but don't send the signature_algorithms extension.

SHA-1 is forbidden in certificates by default, since it's vulnerable
to offline collision-based attacks.

2017-06-06 18:44:14 +02:00

..

data_files

Document test data makefile

2017-06-06 18:44:14 +02:00

scripts

Fix check-doxy-blocks.pl to run from root dir

2017-05-12 00:16:50 +01:00

suites

SHA-1 deprecation: allow it in key exchange

2017-06-06 18:44:14 +02:00

.gitignore

Move some ignore patterns to subdirectories

2015-01-28 15:33:23 +00:00

CMakeLists.txt

Remove need for elevated command line in Windows

2017-02-15 09:08:26 +00:00

compat.sh

Allow SHA-1 in test scripts

2017-06-06 18:44:14 +02:00

Descriptions.txt

Add selftest program to the list of tests

2014-04-04 16:33:01 +02:00

Makefile

Clean up of formatting, and potential integer overflow fix

2016-10-13 13:51:13 +01:00

ssl-opt.sh

SHA-1 deprecation: allow it in key exchange

2017-06-06 18:44:14 +02:00