tree 5e992e661f33be81cf2023e277a0fc7196a5fa82
parent bac9f1bfb00d70064052e6ab04eb7d9cb89dc1e1
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1580378337 +0100
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1580379922 +0100

Fix ssl-opt.sh for GnuTLS versions rejecting SHA-1

While the whole script makes (often implicit) assumptions about the version of
GnuTLS used, generally speaking it should work out of the box with the version
packaged on our reference testing platform, which is Ubuntu 16.04 so far.

With the update from Jan 8 2020 (3.4.10-4ubuntu1.6), the patches for rejecting
SHA-1 in certificate signatures were backported, so we should avoid presenting
SHA-1 signed certificates to a GnuTLS peer in ssl-opt.sh.