generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

don't use pseudo digests for default values of keys

Browse Source
This commit is contained in:
Dr. Stephen Henson 2012-06-27 14:12:01 +00:00
parent 8b654459be
commit a240ea8ab8
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ssl/ssl_cert.c
View File

@ -164,14 +164,14 @@ static void ssl_cert_set_default_md(CERT *cert)
{ {
/* Set digest values to defaults */ /* Set digest values to defaults */
#ifndef OPENSSL_NO_DSA #ifndef OPENSSL_NO_DSA
cert->pkeys[SSL_PKEY_DSA_SIGN].digest = EVP_dss1(); cert->pkeys[SSL_PKEY_DSA_SIGN].digest = EVP_sha1();
#endif #endif
#ifndef OPENSSL_NO_RSA #ifndef OPENSSL_NO_RSA
cert->pkeys[SSL_PKEY_RSA_SIGN].digest = EVP_sha1(); cert->pkeys[SSL_PKEY_RSA_SIGN].digest = EVP_sha1();
cert->pkeys[SSL_PKEY_RSA_ENC].digest = EVP_sha1(); cert->pkeys[SSL_PKEY_RSA_ENC].digest = EVP_sha1();
#endif #endif
#ifndef OPENSSL_NO_ECDSA #ifndef OPENSSL_NO_ECDSA
cert->pkeys[SSL_PKEY_ECC].digest = EVP_ecdsa(); cert->pkeys[SSL_PKEY_ECC].digest = EVP_sha1();
#endif #endif
} }

4
ssl/t1_lib.c
View File

@ -2918,7 +2918,7 @@ int tls1_process_sigalgs(SSL *s, const unsigned char *data, int dsize)
*/ */
#ifndef OPENSSL_NO_DSA #ifndef OPENSSL_NO_DSA
if (!c->pkeys[SSL_PKEY_DSA_SIGN].digest) if (!c->pkeys[SSL_PKEY_DSA_SIGN].digest)
c->pkeys[SSL_PKEY_DSA_SIGN].digest = EVP_dss1(); c->pkeys[SSL_PKEY_DSA_SIGN].digest = EVP_sha1();
#endif #endif
#ifndef OPENSSL_NO_RSA #ifndef OPENSSL_NO_RSA
if (!c->pkeys[SSL_PKEY_RSA_SIGN].digest) if (!c->pkeys[SSL_PKEY_RSA_SIGN].digest)
@ -2929,7 +2929,7 @@ int tls1_process_sigalgs(SSL *s, const unsigned char *data, int dsize)
#endif #endif
#ifndef OPENSSL_NO_ECDSA #ifndef OPENSSL_NO_ECDSA
if (!c->pkeys[SSL_PKEY_ECC].digest) if (!c->pkeys[SSL_PKEY_ECC].digest)
c->pkeys[SSL_PKEY_ECC].digest = EVP_ecdsa(); c->pkeys[SSL_PKEY_ECC].digest = EVP_sha1();
#endif #endif
return 1; return 1;
} }