diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2018-02-12 11:18:06 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2018-02-12 11:55:44 +0100 |
| commit | ef44477127952c13e93d7ea88f7b549bf36602f5 (patch) | |
| tree | d43ea0c64ec350dd261704ce71df5ba4580a7ad5 /lib/priority.c | |
| parent | 32aa795a81e413672dd2485e461ff87f64e211aa (diff) | |
| download | gnutls-ef44477127952c13e93d7ea88f7b549bf36602f5.tar.gz | |
priority: disable the enabled by default RSA-PSS signature algorithmstmp-tests-include-ccm
They have been modified in the latest (yet unsupported) TLS 1.3
drafts, so prevent causes interoperability failures by keeping them
on.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Diffstat (limited to 'lib/priority.c')
| -rw-r--r-- | lib/priority.c | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/lib/priority.c b/lib/priority.c index ff49875e7b..6019321405 100644 --- a/lib/priority.c +++ b/lib/priority.c @@ -1,6 +1,6 @@ /* * Copyright (C) 2004-2015 Free Software Foundation, Inc. - * Copyright (C) 2015-2017 Red Hat, Inc. + * Copyright (C) 2015-2018 Red Hat, Inc. * * Author: Nikos Mavrogiannopoulos * @@ -376,9 +376,9 @@ static const int _sign_priority_default[] = { GNUTLS_SIGN_ECDSA_SHA1, /* added on the final position for compatibility purposes */ - GNUTLS_SIGN_RSA_PSS_SHA256, + /*GNUTLS_SIGN_RSA_PSS_SHA256, GNUTLS_SIGN_RSA_PSS_SHA384, - GNUTLS_SIGN_RSA_PSS_SHA512, + GNUTLS_SIGN_RSA_PSS_SHA512,*/ GNUTLS_SIGN_EDDSA_ED25519, 0 @@ -407,9 +407,9 @@ static const int _sign_priority_secure128[] = { GNUTLS_SIGN_ECDSA_SHA512, /* added on the final position for compatibility purposes */ - GNUTLS_SIGN_RSA_PSS_SHA256, + /*GNUTLS_SIGN_RSA_PSS_SHA256, GNUTLS_SIGN_RSA_PSS_SHA384, - GNUTLS_SIGN_RSA_PSS_SHA512, + GNUTLS_SIGN_RSA_PSS_SHA512,*/ GNUTLS_SIGN_EDDSA_ED25519, 0 @@ -423,8 +423,8 @@ static const int _sign_priority_secure192[] = { GNUTLS_SIGN_ECDSA_SHA512, /* added on the final position for compatibility purposes */ - GNUTLS_SIGN_RSA_PSS_SHA384, - GNUTLS_SIGN_RSA_PSS_SHA512, + /*GNUTLS_SIGN_RSA_PSS_SHA384, + GNUTLS_SIGN_RSA_PSS_SHA512,*/ 0 }; static const int* sign_priority_secure192 = _sign_priority_secure192; |