Gilles Peskine 5d2511c4d4 SHA-1 deprecation: allow it in key exchange ... By default, keep allowing SHA-1 in key exchange signatures. Disabling it causes compatibility issues, especially with clients that use TLS1.2 but don't send the signature_algorithms extension. SHA-1 is forbidden in certificates by default, since it's vulnerable to offline collision-based attacks.		2017-06-06 18:44:14 +02:00
..
.gitignore
aes.c	Change return type of AES decrypt and encrypt	2017-05-16 10:22:37 +01:00
aesni.c
arc4.c
asn1parse.c	Fix 1 byte overread in mbedtls_asn1_get_int()	2016-10-13 13:54:14 +01:00
asn1write.c
base64.c	Add comment to integer overflow fix in base64.c	2017-02-15 23:31:07 +02:00
bignum.c	Fix buffer overflow in mbedtls_mpi_write_string()	2017-03-02 21:34:21 +00:00
blowfish.c
camellia.c
ccm.c
certs.c	X.509 self-tests: replaced SHA-1 certificates by SHA-256	2017-06-06 18:44:13 +02:00
cipher_wrap.c
cipher.c	Fix integer overflows in buffer bound checks	2017-02-15 23:31:07 +02:00
cmac.c	Fix check-doxy-blocks.pl errors (cmac.c ecjpake.h)	2017-05-12 00:18:04 +01:00
CMakeLists.txt	Updated version number to 2.5.0	2017-05-16 10:22:37 +01:00
ctr_drbg.c	Fix integer overflows in buffer bound checks	2017-02-15 23:31:07 +02:00
debug.c	Fix compiler warning in debug.c	2017-02-15 09:08:26 +00:00
des.c
dhm.c
ecdh.c
ecdsa.c
ecjpake.c
ecp_curves.c	ECP: Add module and function level replacement options.	2017-05-11 22:42:14 +01:00
ecp.c	Fix cleanup label alignment	2017-05-11 22:42:14 +01:00
entropy_poll.c
entropy.c
error.c	Merge fix for IE Certificate Compatibility	2016-10-13 17:21:01 +01:00
gcm.c	Fix documentation for mbedtls_gcm_finish()	2016-10-13 13:54:47 +01:00
havege.c
hmac_drbg.c
Makefile
md2.c	Fix integer overflows in buffer bound checks	2017-02-15 23:31:07 +02:00
md4.c
md5.c
md_wrap.c
md.c
memory_buffer_alloc.c
net_sockets.c	Fix formatting issues in net_sockets.c	2017-02-15 09:08:26 +00:00
oid.c
padlock.c
pem.c	Fix unused variable/function compilation warnings	2017-02-15 22:54:42 +02:00
pk_wrap.c	Fix data loss in unsigned int cast in PK	2017-05-11 21:55:17 +01:00
pk.c	Fix data loss in unsigned int cast in PK	2017-05-11 21:55:17 +01:00
pkcs5.c
pkcs11.c
pkcs12.c
pkparse.c	Clarify Comments and Fix Typos (#651)	2017-02-15 09:08:26 +00:00
pkwrite.c
platform.c	Fix various compiler warnings with MSVC	2017-02-15 09:08:26 +00:00
ripemd160.c
rsa.c	RSA: wipe more stack buffers	2017-05-16 10:22:37 +01:00
sha1.c
sha256.c	Use allocated memory for SHA self tests	2016-10-13 15:10:14 +01:00
sha512.c	Use allocated memory for SHA self tests	2016-10-13 15:10:14 +01:00
ssl_cache.c
ssl_ciphersuites.c	Remember suitable hash function for any signature algorithm.	2017-05-15 11:50:11 +01:00
ssl_cli.c	Allow SHA-1 in SSL renegotiation tests	2017-06-06 18:44:13 +02:00
ssl_cookie.c	Fix resource leak when using mutex and ssl_cookie	2017-03-02 12:26:11 +00:00
ssl_srv.c	Merge remote-tracking branch 'hanno/sig_hash_compatibility' into development	2017-06-06 18:14:57 +02:00
ssl_ticket.c
ssl_tls.c	SHA-1 deprecation: allow it in key exchange	2017-06-06 18:44:14 +02:00
threading.c	Fix bug in threading sample implementation #667	2017-05-16 10:22:37 +01:00
timing.c
version_features.c	Update version features with ECP macros	2017-05-11 22:42:14 +01:00
version.c
x509_create.c
x509_crl.c	Fix memory leak in mbedtls_x509_crl_parse()	2017-02-28 14:51:31 +00:00
x509_crt.c	SHA-1 deprecation: allow it in key exchange	2017-06-06 18:44:14 +02:00
x509_csr.c	Fix unused variable/function compilation warnings	2017-02-15 22:54:42 +02:00
x509.c	X.509 self-tests: replaced SHA-1 certificates by SHA-256	2017-06-06 18:44:13 +02:00
x509write_crt.c
x509write_csr.c
xtea.c