From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 16 Apr 2011 20:46:56 +0000 (+0200)
Subject: Restored HMAC-MD5 for compatibility. Although considered weak, several sites require... 
X-Git-Tag: gnutls_2_99_1~14
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b4fb5cc26affff88970954b223215edb8df56e84;p=thirdparty%2Fgnutls.git

Restored HMAC-MD5 for compatibility. Although considered weak, several sites require it for connection. It is enabled for "NORMAL" and "PERFORMANCE" priority strings.
---

diff --git a/NEWS b/NEWS
index 2976d3c365..a64f086dc3 100644
--- a/NEWS
+++ b/NEWS
@@ -8,6 +8,12 @@ See the end for copying conditions.
 ** libgnutls: Added support for AES-NI if detected. Uses
 Andy Polyakov's AES-NI code.
 
+* libgnutls: Restored HMAC-MD5 for compatibility. Although considered 
+weak, several sites require it for connection. It is enabled for
+"NORMAL" and "PERFORMANCE" priority strings.
+
+* libgnutls: depend on libdl.
+
 ** libgnutls-extra: Dropped support of LZO compression via liblzo.
 
 ** libgnutls: gnutls_transport_set_global_errno() was removed. This
diff --git a/lib/gnutls_priority.c b/lib/gnutls_priority.c
index 505cf9e440..ec3dee3a4c 100644
--- a/lib/gnutls_priority.c
+++ b/lib/gnutls_priority.c
@@ -363,10 +363,11 @@ static const int sign_priority_secure256[] = {
   0
 };
 
-static const int mac_priority_performance[] = {
+static const int mac_priority_normal[] = {
   GNUTLS_MAC_SHA1,
   GNUTLS_MAC_SHA256,
   GNUTLS_MAC_AEAD,
+  GNUTLS_MAC_MD5,
   0
 };
 
@@ -583,7 +584,7 @@ gnutls_priority_init (gnutls_priority_t * priority_cache,
           _set_priority (&(*priority_cache)->cipher,
                          cipher_priority_performance);
           _set_priority (&(*priority_cache)->kx, kx_priority_performance);
-          _set_priority (&(*priority_cache)->mac, mac_priority_performance);
+          _set_priority (&(*priority_cache)->mac, mac_priority_normal);
           _set_priority (&(*priority_cache)->sign_algo,
                          sign_priority_default);
         }
@@ -591,7 +592,7 @@ gnutls_priority_init (gnutls_priority_t * priority_cache,
         {
           _set_priority (&(*priority_cache)->cipher, cipher_priority_normal);
           _set_priority (&(*priority_cache)->kx, kx_priority_secure);
-          _set_priority (&(*priority_cache)->mac, mac_priority_secure);
+          _set_priority (&(*priority_cache)->mac, mac_priority_normal);
           _set_priority (&(*priority_cache)->sign_algo,
                          sign_priority_default);
         }