TLS client: Add signature_algorithms extension into ClientHello
authorJouni Malinen <j@w1.fi>
Sun, 29 Nov 2015 15:30:37 +0000 (17:30 +0200)
committerJouni Malinen <j@w1.fi>
Sun, 29 Nov 2015 16:21:07 +0000 (18:21 +0200)
commit0aed9156efc99fa16fb01a3fa31a16c119408929
tree6108e8027fdf5500610b9525d8f44fd443a74563
parent9e8809a717f98d8c6cd14448d221c3b38492f775
TLS client: Add signature_algorithms extension into ClientHello

Since we support only SHA256 (and not the default SHA1) with TLS v1.2,
the signature_algorithms extensions needs to be added into ClientHello.
This fixes interop issues with the current version of OpenSSL that uses
the default SHA1 hash if ClientHello does not specify allowed signature
algorithms.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/tls/tlsv1_client.c
src/tls/tlsv1_client_write.c
src/tls/tlsv1_common.h