]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.2] crypto/tls: advertise support for RSA+SHA1 in TLS 1.2 handshake.
authorAndrew Gerrand <adg@golang.org>
Fri, 1 Nov 2013 00:09:06 +0000 (11:09 +1100)
committerAndrew Gerrand <adg@golang.org>
Fri, 1 Nov 2013 00:09:06 +0000 (11:09 +1100)
commit6cbfe8df5c22ed2859980ba51309be434eb3084f
treee09c2aedfd1a7d7fb0cd8a3705bceb02444f9867
parent34250ab21200482a13dfb3c67e2bc5fad4e0e855
[release-branch.go1.2] crypto/tls: advertise support for RSA+SHA1 in TLS 1.2 handshake.

««« CL 15650043 / 29d3ab5ced5a
crypto/tls: advertise support for RSA+SHA1 in TLS 1.2 handshake.

Despite SHA256 support being required for TLS 1.2 handshakes, some
servers are aborting handshakes that don't offer SHA1 support.

This change adds support for signing TLS 1.2 ServerKeyExchange messages
with SHA1. It does not add support for signing TLS 1.2 client
certificates with SHA1 as that would require the handshake to be
buffered.

Fixes #6618.

R=golang-dev, r
CC=golang-dev
https://golang.org/cl/15650043
»»»

R=golang-dev
CC=golang-dev
https://golang.org/cl/20570043
src/pkg/crypto/tls/common.go
src/pkg/crypto/tls/handshake_client.go
src/pkg/crypto/tls/handshake_client_test.go
src/pkg/crypto/tls/handshake_messages_test.go
src/pkg/crypto/tls/handshake_server.go
src/pkg/crypto/tls/key_agreement.go