]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ikev2: Don't use SHA-1 for RFC 7427 signature authentication
authorTobias Brunner <tobias@strongswan.org>
Tue, 19 Sep 2017 09:10:09 +0000 (11:10 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 8 Nov 2017 15:47:24 +0000 (16:47 +0100)
commit43b59d13239e0d9593649b77bdea3651150f6132
tree7fec605b0c29e2bbc64a40588814f63eaef1b1e1
parent76c58498efd1a80a70966889bd3fdc3b9e863b06
ikev2: Don't use SHA-1 for RFC 7427 signature authentication

RFC 8247 demoted it to MUST NOT.

References #2427.
src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c
src/libstrongswan/crypto/hashers/hasher.c
src/libstrongswan/tests/suites/test_hasher.c