commit 7d13539d1b3562669d8dc6de98ed2255e0a84f24
author Mateusz Starzyk <mateusz.starzyk@mobica.com> Fri Aug 27 15:36:47 2021 +0200
committer Mateusz Starzyk <mateusz.starzyk@mobica.com> Mon Sep 06 12:19:25 2021 +0200
tree be58140cd180e81e0c5c4002599d69f93dd52f6d
parent b3d344c2250a21c954335f7c5b4ee05ebe452356

Disable MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE in default config.

Signed-off-by: Mateusz Starzyk <mateusz.starzyk@mobica.com>

include/mbedtls/config.h

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index a95ec02..2c7bed2 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -3912,7 +3912,7 @@
  *            on it, and considering stronger message digests instead.
  *
  */
-#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
+//#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
 
 /**
  * Uncomment the macro to let mbed TLS use your alternate implementation of