openssl/ssl
Matt Caswell 8e32ea633f Check whether we have MD5-SHA1 and whether we need it
If we don't have MD5-SHA1 then we must be use (D)TLSv1.2 or above. We
check that this is consistent with the way we've been configured. We also
ensure that we never attempt to negotiate <(D)TLSv1.2 if MD5-SHA1 is not
available.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/12733)
2020-08-29 17:56:37 +10:00
..
record apps: -msg flag enhancement 2/2 2020-08-27 13:11:12 +03:00
statem Check whether we have MD5-SHA1 and whether we need it 2020-08-29 17:56:37 +10:00
bio_ssl.c Update copyright year 2020-05-15 14:09:49 +01:00
build.info Add provider support for TLS CBC padding and MAC removal 2020-07-06 09:26:09 +01:00
d1_lib.c
d1_msg.c
d1_srtp.c Update copyright year 2020-05-15 14:09:49 +01:00
methods.c
pqueue.c
s3_cbc.c unify spelling of serialize 2020-07-30 20:15:22 +10:00
s3_enc.c Improve some error messages if a digest is not available 2020-08-29 17:56:20 +10:00
s3_lib.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
s3_msg.c
ssl_asn1.c
ssl_cert_table.h
ssl_cert.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_ciph.c deprecate engines in SSL 2020-07-16 09:12:27 +02:00
ssl_conf.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_err.c Improve some error messages if a digest is not available 2020-08-29 17:56:20 +10:00
ssl_init.c Providerized libssl fallout: cleanup init 2020-07-11 15:13:09 -07:00
ssl_lib.c Fix coverity CID #1465795 - Incorrect free deallocator used in SSL_add1_host() 2020-08-24 11:19:28 +10:00
ssl_local.h Convert SSLv3 handling to use provider side CBC/MAC removal 2020-07-06 09:26:09 +01:00
ssl_mcnf.c Update copyright year 2020-08-06 13:22:30 +01:00
ssl_rsa.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ssl_sess.c deprecate engines in SSL 2020-07-16 09:12:27 +02:00
ssl_stat.c
ssl_txt.c Update copyright year 2020-04-23 13:55:52 +01:00
ssl_utst.c
t1_enc.c Ensure libssl creates libctx aware MAC keys 2020-08-29 17:40:10 +10:00
t1_lib.c Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*" 2020-07-16 14:21:07 +02:00
t1_trce.c t1_trce: Fix remaining places where the 24 bit shift overflow happens 2020-05-20 17:31:56 +02:00
tls13_enc.c Revert "kdf: make function naming consistent." 2020-07-16 14:21:07 +02:00
tls_srp.c Update copyright year 2020-04-23 13:55:52 +01:00