]> git.ipfire.org Git - thirdparty/openssl.git/commit
Test an old style PSK callback with no cert will prefer SHA-256
authorMatt Caswell <matt@openssl.org>
Thu, 10 May 2018 11:33:51 +0000 (12:33 +0100)
committerMatt Caswell <matt@openssl.org>
Fri, 11 May 2018 12:47:13 +0000 (13:47 +0100)
commit0d8da77908df1aa3186b00113aab1b338cba9b07
tree4b5f34ae3b2114bc4d2de1b67d5197a15ed691a2
parent9e064bc1701599a15d0111a252b70fe45f2d2da8
Test an old style PSK callback with no cert will prefer SHA-256

If using an old style PSK callback and no certificate is configured for
the server, we should prefer ciphersuites based on SHA-256, because that
is the default hash for those callbacks as specified in the TLSv1.3 spec.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6215)
test/sslapitest.c
test/ssltestlib.c