commit 8671e7b9f7bea77db5f3bd7dd7705002a28b1781
author Hanno Becker <hanno.becker@arm.com> Fri Aug 16 09:55:15 2019 +0100
committer Hanno Becker <hanno.becker@arm.com> Thu Aug 29 16:01:32 2019 +0100
tree 40f82425fb1effb394339e2a1a303896c86b7195
parent 2f41b248c1c470da0d1e141d341e0c8cf094d021

Remove redundant SHA-1 code-path in TLS-1.2 handling of CrtVrfy

SHA-1 is no longer offered nor accepted for the client's CertificateVerify
message in TLS 1.2. See 0a64170.

library/ssl_srv.c

diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 39edd83..b058e7c 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -4539,11 +4539,6 @@
             goto exit;
         }
 
-#if !defined(MBEDTLS_MD_SHA1)
-        if( MBEDTLS_MD_SHA1 == md_alg )
-            hash_start += 16;
-#endif
-
         /* Info from md_alg will be used instead */
         hashlen = 0;