From 138d9f52cf18d6969e07126fc3fe254c2498427d Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Mon, 21 Jun 2021 09:53:25 +0200 Subject: [PATCH] SHA-1 is allowed for handshake signatures by default Signed-off-by: Gilles Peskine --- include/mbedtls/ssl.h | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h index 8f11fa243..bd0f5d779 100644 --- a/include/mbedtls/ssl.h +++ b/include/mbedtls/ssl.h @@ -3019,7 +3019,9 @@ void mbedtls_ssl_conf_curves( mbedtls_ssl_config *conf, #if defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED) /** * \brief Set the allowed hashes for signatures during the handshake. - * (Default: all SHA2 hashes, largest first.) + * (Default: all SHA-2 hashes, largest first. Also SHA-1 if + * the compile-time option + * `MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE` is enabled.) * * \note This only affects which hashes are offered and can be used * for signatures during the handshake. Hashes for message