tree 41f96857bcdfaa2cc8ae35b97079a5b0fe58c078
parent cd6e4d5bccf939318cea4c639361ef634c96722f
author Gilles Peskine <Gilles.Peskine@arm.com> 1493907441 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> 1496768899 +0200

Remove SHA-1 in TLS by default

Default to forbidding the use of SHA-1 in TLS where it is unsafe: for
certificate signing, and as the signature hash algorithm for the TLS
1.2 handshake signature. SHA-1 remains allowed in HMAC-SHA-1 in the
XXX_SHA ciphersuites and in the PRF for TLS <= 1.1.

For easy backward compatibility for use in controlled environments,
turn on the MBEDTLS_TLS_DEFAULT_ALLOW_SHA1 compiled-time option.